SHEKU/IT/OT Cybersecurity
IT/OT Cybersecurity

Cybersecurity and
industrial operations.

OT assessment, remote access and project security for mining, energy and manufacturing. Assessment and design coordinated with operational owners.

Discuss the Scope
Three starting engagements

A clear scope.
Verifiable deliverables.

Sites, assets, available documentation and visits determine the final proposal.

Starting engagement

Initial OT Security Assessment

For operations that need to understand exposure and prioritize improvements.

Scope
Document review, interviews and architecture/access assessment over an agreed sample.
Deliverables
Executive report, technical findings and a prioritized roadmap.
Exclusions
Complete asset discovery, active scanning, site visits and implementation are scoped separately when required.
Client prerequisites
An available technical owner, authorized documentation and defined access boundaries.
Acceptance
Delivery and joint review of the agreed documents; remediation is contracted separately.
Timing & quotation
Confirmed according to sites, assets, documentation, visits and maintenance windows.
Discuss the scope ↗
Starting engagement

Secure Vendor Remote Access

For teams providing access to manufacturers, integrators and maintainers.

Scope
Review of existing access paths, identities, permissions, traceability and procedures.
Deliverables
Reference architecture, access matrix and implementation plan.
Exclusions
Licensing, continuous operations and site deployment require a separate scope.
Client prerequisites
An available technical owner, authorized documentation and defined access boundaries.
Acceptance
Delivery and joint review of the agreed documents; remediation is contracted separately.
Timing & quotation
Confirmed according to sites, assets, documentation, visits and maintenance windows.
Discuss the scope ↗
Starting engagement

Security for Projects & EPC

For asset owners and teams building, expanding or modernizing facilities.

Scope
Cybersecurity requirements, design review and agreed acceptance criteria.
Deliverables
Technical annex, requirements matrix and review/acceptance findings.
Exclusions
Certification, EPC responsibilities and full plant acceptance are outside this service.
Client prerequisites
An available technical owner, authorized documentation and defined access boundaries.
Acceptance
Delivery and joint review of the agreed documents; remediation is contracted separately.
Timing & quotation
Confirmed according to sites, assets, documentation, visits and maintenance windows.
Discuss the scope ↗
Technical capabilities

Security with
operational context.

Reference frameworks are applied to the agreed scope; an assessment is not presented as certification.

Industrial network segmentation

Review and design of zones, conduits, permitted communications and IT/OT separation.

Operational resilience

Review backups, dependencies and recovery procedures, with agreed test scenarios.

IEC 62443-oriented architecture

Relevant concepts support gap assessment and architecture decisions.

Risk & vulnerability management

Prioritize according to exposure, criticality and maintenance windows; changes remain under operational control.

TI / IT

Data, identities and applications

Confidentiality, integrity, access and availability of digital services.

OT

Processes, assets and availability

Effects on physical processes, continuity, legacy systems and controlled change.

From assessment to implementation

Let’s discuss your operation.

Tell us about the challenge, systems and constraints. We will define a practical scope and next step.

Talk to an Engineer