SCYR / IT + OT CYBERSECURITY

OT site assessments

OT site assessments

OT site assessments

Understand production context, critical dependencies, site architecture and practical exposure before changing controls.

Understand production context, critical dependencies, site architecture and practical exposure before changing controls.

Understand production context, critical dependencies, site architecture and practical exposure before changing controls.

CONTROLLED CONDUITS

SCYR / SERVICE

SEGMENTATION / MEDIATED ACCESS

L4–5

ENTERPRISE

L3.5

INDUSTRIAL DMZ

L3

OPERATIONS

L2

SUPERVISORY

L1

CONTROL

L0

PROCESS

EWS / REVIEW

BROKERED / NO DIRECT TRUST

CONTROLLED CONDUITS

SCYR / SERVICE

SEGMENTATION / MEDIATED ACCESS

L4–5

ENTERPRISE

L3.5

INDUSTRIAL DMZ

L3

OPERATIONS

L2

SUPERVISORY

L1

CONTROL

L0

PROCESS

EWS / REVIEW

BROKERED / NO DIRECT TRUST

01 / THE CHALLENGE

When this service makes sense

When this service makes sense

When this service makes sense

You need an independent picture of exposure at a plant, production site or industrial facility, particularly where asset inventories, network documentation and operational responsibility do not fully align.

02 / HOW WE WORK

A practical, evidence-led engagement.

A practical, evidence-led engagement.

A practical, evidence-led engagement.

The sequence is adapted to the environment, authorised scope and desired outcomes. We establish constraints before recommending intrusive or operationally disruptive work.

01

Understand

We agree scope and safety constraints with site stakeholders, examine available architecture and asset information, and understand the critical processes, remote access routes and operational dependencies.

02

Deliver

We combine appropriate technical review with interviews or site observations, mapping relevant trust boundaries and testing assumptions against what actually operates on site.

03

Embed

We prioritise identified gaps by operational consequence, outline pragmatic improvements and discuss responsibilities, sequencing and any further validation needed.

03 / WHAT YOU TAKE AWAY

TYPICAL OUTPUTS

Site observations, prioritised findings and a realistic improvement roadmap.

WHAT THIS ENABLES

A defensible picture of where to focus investment and which additional activities are worth commissioning.

04 / DELIVERY CONSIDERATIONS

Clear scope. Fewer surprises.

Clear scope. Fewer surprises.

Clear scope. Fewer surprises.

SCOPE & SAFETY

The assessment is scoped to the site and available access. It does not imply intrusive testing of production systems or guaranteed discovery of every connected asset.

PRACTICAL DEPENDENCIES

A site walkthrough, documentation quality, network access, safety procedures and engineering availability determine the depth of evidence we can gather.

05 / EXPLORE NEXT

Connected work. Related expertise.

Connected work. Related expertise.

Connected work. Related expertise.

06 / START A CONVERSATION

Have a specific environment or constraint in mind?

Have a specific environment or constraint in mind?

Have a specific environment or constraint in mind?

Tell us about the challenge. We can discuss scope, prerequisites and what a useful first step could look like.