Asset discovery, segmentation review and IEC 62443 gap analysis for industrial control systems.
Engagement
Fixed-scope project · 3–6 weeks
What it is
We assess operational technology and industrial control systems without disrupting production. We find assets passively, review how IT and OT are separated, map defence-in-depth in line with U.S. DHS ICS guidance, and measure gaps against IEC 62443.
Who it's for
Manufacturers, utilities, energy, water and critical-infrastructure operators.
The outcome
A clear view of OT risk and a plan to reduce it without stopping the plant.
Step 1
Safety briefing
Agree what can and cannot be touched with operations and safety teams.
Step 2
Passive discovery
Map assets and traffic without active scanning of controllers.
Step 3
Assessment
Review architecture, access paths and controls.
Step 4
Roadmap
Prioritised actions aligned to maintenance windows.
No. We use passive methods for live control networks and only test actively in agreed windows or test environments.
Yes. Findings map to IEC 62443 and support obligations such as Malaysia's NCII codes of practice and Australia's SOCI Act.
More from Shield
Vulnerability Assessment & Penetration Testing (VAPT)
Find and prove exploitable weaknesses in your applications, networks and cloud before attackers do.
Red Teaming & Adversary Simulation
Goal-based attack simulation across people, process and technology, with purple-team workshops to tune your detection.
Social Engineering & Phishing Simulation
Phishing, vishing and physical-access tests that show how your people respond, with results fed into training.