A security review of designs for new or upgraded industrial facilities and control systems, so cybersecurity is built in before commissioning.
It is far cheaper to design security in than to retrofit it. We review engineering designs, vendor specifications and integration plans at key project stages and define the cybersecurity requirements suppliers must meet.
Design-stage security requirements
Vendor and integrator specification review
Factory and site acceptance test security checks
Commissioning security sign-off
What’s included
Every Cybersecurity Architecture Design Review (CADR) engagement is scoped to your systems, risks and team, with clear outcomes agreed before work starts.
Security requirements written into specifications and contracts.
Checks at design, factory acceptance, site acceptance and commissioning.
Evidence that vendors and integrators have met agreed requirements.
In industrial environments, availability and safety come first. Our OT specialists understand control systems and work with engineers to reduce cyber risk without disrupting production.
Learn the plant, processes and safety constraints with your engineers.
Build an inventory of controllers, HMIs, networks and remote connections, passively.
Evaluate risk and controls against IEC 62443 and NIST SP 800-82.
Deliver improvements in planned maintenance windows with full engineering sign-off.

Deliverables
Outcomes
Cyber risk reduced without putting production or safety at risk.
A complete picture of what is connected in your plant.
Clear responsibilities between IT security and operations engineering.
Progress measured against IEC 62443, the industrial security standard.
Tell us about your environment, timelines and goals. We will come back with a clear scope and quote.
Request a quote