Capability · The immune system
Energy Cybersecurity & Resilience.
Cybersecurity is designed through the stack. Our assessment spans the connected asset, from enterprise IT to the field devices that move power.
Threat path
Remote access is part of asset assurance.
One compromised remote session can travel from a stolen password to a tripped asset. Turn on the controls and see where the path stops.
- 01Stolen credentialsA vendor or engineer password is phished or reused.Blocked
- 02Valid sessionThe attacker logs in through legitimate remote access.Blocked
- 03Lateral movementFrom the jump host into control zones.Blocked
- 04Unauthorised changeA controller setpoint or configuration is altered.Blocked
- 05Trip / instabilityPhysical impact on the asset and the grid.Blocked
Through the stack
Five zones. One connected attack surface.
- Enterprise ITidentity · email · ERP
- IT / OT boundarysegmentation · access
- OT DMZjump hosts · historians
- SCADA / ControlEMS · HMI · servers
- Field / ProcessIEDs · PLCs · BMS
Six domains
What we assess and design.
OT / ICS Architecture
Zones, conduits, edge/cloud and governed data paths.
Identity & Remote Access
PAM, MFA and vendor sessions.
Detection & Operations
Asset visibility, SOC integration and use cases.
Resilience & Recovery
Incident response, backup and drills.
Compliance & Assurance
Applicable frameworks, control mapping and evidence.
Secure Change
Firmware, configuration and supplier control.
Reference frameworks include IEC 62443 and applicable national cybersecurity requirements.
The system behind the system
Let's build what the
next grid depends on.
Tell us about the asset, the programme or the question you need answered. A senior member of the team will respond.