1. Home
  2. Energy, Oil & Gas
Energy, oil & gas

OT security for power, utilities, oil and gas.

Substation automation, electrification and traction power SCADA, utility telemetry, terminals and pipelines, secured to IEC 62443 and built around outages, permits and the safety case.

What we do on energy and process sites

Four parts of the estate. What we do on each.

Substation and electrification SCADA

Substation automation, an electrification control room or a power station control system is being renewed or connected to the wider network.

  • Wedesign, harden and separate the network under your isolation and outage plans, keeping protection and control traffic in its own zone.
  • You geta network tested and commissioned to your standards, with control traffic contained where it belongs.
Secure OT network architecture

Plant control: DCS, SIS and package units

The board, the insurer or the regulator asks how exposed the process control estate is.

  • Wemap the control systems, safety systems, package units and the link to the office network into zones, and decide how much protection each needs.
  • You geta costed plan you can take to the board, with the safety systems kept apart from everything else.
OT cyber risk assessment

Plant DMZ and vendor access

Equipment vendors have standing connections into the plant.

  • Weput a controlled boundary between the office network and the plant, and make every vendor session approved, time-limited and recorded.
  • You getit installed in turnarounds and planned outages, with a way back if anything goes wrong.
Segmentation and hardening

Pipelines, terminals and remote sites

SCADA, leak detection and telemetry run over a mix of telecoms, radio and fixed links to sites nobody visits often.

  • Webring the remote sites into the zone model, harden them, and specify equipment rated for hazardous areas.
  • You getresilient links designed and commissioned by our own engineers.
Operational IP/MPLS networks
How we work on your site

Permits, outages and the safety function come first.

  • All site work under your permit-to-work, isolation and hazardous-area rules.
  • We assess live control networks by looking, never by scanning.
  • We work with your safety engineers and never change the safety function; what we produce is written to go straight into the COMAH safety report and NIS evidence.
Where our background helps

Same problems, same standard.

Our deepest experience is railway control networks. The same engineers have worked on power station control upgrades, substation automation, electrification SCADA and utility telemetry. The problems are the same: long-life equipment, vendor packages with their own networks, remote sites, and a safety case that must not move when security changes. IEC 62443 is the same standard across all of them.

Who we are

Standards we work to on energy and process sites: IEC 62443 · IEC 61850 · IEC 60870-5-104 · COMAH · API 1164 · ATEX / IECEx · NIS Regulations and the NCSC CAF

Substation, plant, pipeline or terminal?

Send the network drawing, the safety report or the project scope.