Services

Not sure where to start?

Under the SOCI Act?

Start with the SOCI Act & CIRMP Advisory — covers your regulatory obligations from readiness diagnostic through to a board-ready program.

Need an OT security assessment?

Start with the OT Security Gap & Risk Assessment — identifies gaps, assigns risk, and gives you a prioritised remediation roadmap.

Briefing your board?

Start with an Executive Briefing — translates OT risk into business terms your leadership can act on.

Executive Briefings

Board-ready presentations on OT cyber risk, threat landscape, and regulatory obligations. Designed to give leadership the context they need to make informed decisions about industrial cybersecurity investment.

OT threat landscape overview with real-world case studies
SOCI Act obligation mapping and compliance posture
CIRMP readiness assessment and gap identification
Risk-prioritised recommendation summary with actionable next steps

For: Boards, C-suite, senior leadership teams

OT Security Gap & Risk Assessments

Structured assessment of your OT security posture against IEC 62443, identifying gaps between current state and target security levels. Following gap analysis, we conduct a detailed risk assessment aligned to IEC 62443-3-2 to quantify risk exposure and drive prioritised remediation based on operational impact.

IEC 62443-based zone and conduit analysis
Security level gap assessment (SL-T vs SL-A)
Risk assessment per IEC 62443-3-2 with threat and consequence modelling
Network architecture and segmentation review
Risk-prioritised remediation roadmap

For: OT managers, plant engineers, security teams

View IEC 62443 Expertise → See it in practice →

SOCI Act & CIRMP Advisory

Navigate your obligations under the Security of Critical Infrastructure Act 2018. We help responsible entities develop, review, and mature their Critical Infrastructure Risk Management Programs to meet regulatory requirements and withstand audit scrutiny.

CIRMP development and annual review
All-hazards risk assessment with OT-specific cyber scenarios
Positive Security Obligation (PSO) compliance mapping
Board-level reporting on SOCI Act compliance posture

For: Responsible entities under the SOCI Act, CISOs, risk and compliance teams

Explore SOCI Advisory →

Penetration Testing & Vulnerability Assessment

Targeted security testing for IT and OT environments. We identify exploitable vulnerabilities, validate security controls, and demonstrate real-world attack paths — with the care and coordination that operational environments demand.

OT/ICS network and system vulnerability assessments
IT infrastructure and application penetration testing
Active Directory attack path analysis
Detailed findings with risk-rated remediation guidance

For: Security teams, IT/OT managers, compliance-driven assessments

Training & Capability Uplift

Hands-on training programs to build OT security awareness and technical capability within your organisation. From awareness sessions for plant operators to technical deep-dives for security teams.

OT security awareness for operations staff
IEC 62443 fundamentals workshop
Threat detection and incident response for OT
Tabletop exercises with OT-specific scenarios

For: Operations teams, IT/OT security staff, engineers

Retainer Advisory

Ongoing OT cybersecurity advisory on a retainer basis. Get access to expert guidance when you need it — from architecture reviews to incident support and strategic planning.

Monthly advisory hours for OT security questions
Architecture and design review support
Vendor and solution evaluation
Incident response advisory and escalation support

For: Organisations building long-term OT security capability