Industries / Critical infrastructure
Change with operational continuity in mind.
Obligations under the Security of Critical Infrastructure Act shape what must be evidenced, not just what must be secure. We align network and security decisions with the realities of essential operations: dependencies, access requirements and carefully planned change.
01 / Your world
What is different here, and what we do about it.
- 01Risk management program (CIRMP) controls mapped to the framework you have adopted (Essential Eight, AESCSF, NIST CSF or ISO 27001), with evidence ready for the annual board-approved report
- 02Logging and detection that let you report a cyber incident with significant impact within 12 hours, and one with relevant impact within 72
- 03A ransomware payment playbook, including the 72-hour report the Cyber Security Act 2024 requires
- 04OT and IT segmentation that keeps vendor remote access working and logged
- 05Supplier and personnel access approved, time-limited and recorded: two of the four hazards a CIRMP must address
- 06Change in approved windows, with rollback rehearsed, not assumed
Clients in critical infrastructure
02 / References
References in this sector.
Reference calls with clients in critical infrastructure are available on request, and our written case studies from other sectors show how we work.
03 / Where to start
The services most critical infrastructure clients begin with.
Tell us about your environment.
A one-hour scoping call is free, and we reply promptly.
Talk to our team