Machine · OT & ICS security
Security for the systems that keep buildings and plants running
Building management, access control, HVAC, energy and industrial control systems were built for availability, not for a connected world. We help you protect them without stopping operations.
The challenge
IT and OT are converging. The risks are too.
Legacy by design
Controllers and protocols that run for decades, often without authentication or patches.
Flat networks
One compromised laptop can reach the heating, the doors and the lifts.
Remote vendor access
Maintenance connections that are always on and rarely monitored.
New obligations
NIS2 and BIO2 make OT risk a board-level responsibility.
Our approach
Four steps, aligned with IEC 62443
01
Inventory & assess
Map assets, connections and vendors; determine risk per system.
02
Design zones & conduits
Define trust boundaries and a target security level for each zone.
03
Implement controls
Segmentation, secure remote access and hardening — scheduled around operations.
04
Monitor & improve
Passive OT monitoring, incident playbooks and periodic review.
What we deliver
OT security services
OT risk assessment
A clear view of assets, connections and priorities.
Zones & conduits design
Network architecture based on IEC 62443-3-2.
Secure remote access
Controlled, logged access for vendors and engineers.
OT network monitoring
Passive detection of anomalies and threats.
OT incident response
Playbooks and support when something goes wrong.
Supplier requirements
Security requirements for procurement and contracts.
Frameworks
Standards we work with
- IEC 62443
- NIS2
- BIO2
- ISO 27001
- MITRE ATT&CK for ICS
Frequently asked
Do you need to shut systems down for an assessment?
No. We start with documentation, interviews and passive network analysis, so operations continue as normal.
Does NIS2 apply to our building systems?
If your organisation falls under NIS2, the duty of care covers the network and information systems your services depend on — which often includes OT.
We work with several maintenance vendors. Can you help?
Yes. Secure, auditable remote access for third parties is one of the most common first steps we implement.
What does IEC 62443 add to ISO 27001?
ISO 27001 sets up the management system; IEC 62443 gives concrete technical and organisational requirements for control systems.
Not sure where your OT risks are?
Start with an OT risk assessment. We map what is connected and what matters most.