OT and IoT Security
Protect operational technology and IoT environments with context-aware controls, visibility and threat detection designed for critical infrastructure.
Typical triggers.
- aProduction, utility or building systems share a network with corporate IT.
- bYou need to meet IEC 62443, NIST SP 800-82 or SOCI obligations.
- cVendors need remote access to control systems, and you want every session visible and recorded.
Industrial control systems were built to run for decades on networks nobody expected to connect to anything else. Many cannot be patched, speak protocols with no authentication, and cannot tolerate an active scan. We work within those constraints rather than around them.
It starts with passive discovery: listening to the network, without touching control systems, to map every ICS, SCADA and IoT device and how they talk to each other. From that map we design zones and conduits that follow how the plant or facility actually runs, segment OT from corporate IT, and put context-aware access controls between them. Vendors and integrators get secure remote access, with every session visible and recorded.
Anomaly detection tuned for OT protocols then watches for what does not belong. The work is aligned with IEC 62443, NIST SP 800-82 and ISO 27019, and with the obligations of the Security of Critical Infrastructure (SOCI) Act. Change is planned with your plant engineers and around production, not imposed on it.
- Internet and cloud
- EdgeFirewall · SD-WAN · zero trust access
- CoreSegmentation · identity · visibility
- Sites · OT · IoT · users
One policy domain, one standard everywhere
One policy domain, edge to endpoint.
Edge, core and every site are designed as a single security fabric, so a rule written once applies the same way in a data centre, a depot or a plant.
Concrete deliverables, agreed before we start.
What you receive
- 01Passive asset discovery and a map of your ICS, SCADA and IoT estate
- 02Zones, conduits and segmentation designed around how the plant runs
- 03Secure, recorded remote access for OEMs and integrators
- 04Anomaly detection and monitoring tuned for OT protocols
Credentials and references.
Reference calls with current clients on request.
ISO/IEC 27001:2022 certifiedInformation security management system
ASD Cyber Security PartnerAustralian Signals Directorate Cyber Security Partnership Program
Multiple CCIE holders including Cisco Emeritus. NSE8 (FCX) certified. Two-time APAC Fortinet Fabric Challenge champions, and #2 worldwide.
Case studies, videos and written references Fortinet credentialsStart with a
scoping call.
Tell us roughly what is in your environment and what prompted the question. We will say whether this is the right first step, and what it would cost.