Industrial Cyber Security

Increasing OT security step-by-step

BearingPoint’s industrial cybersecurity services help businesses protect their most valued and critical assets: production lines, plants, medical devices, IoT landscapes, and everything else that runs industrial control systems for automation.

While there is no silver bullet for solving all cybersecurity challenges, we have developed a five-step approach that allows businesses to understand the security levels at their plants and environments and what can be done to improve those levels. With our technology partnerships, we can deliver and implement security solutions specifically designed and configured for industrial environments and their unique challenges, endpoint protection for exposed clients, and specialized ICS asset and anomaly detection and mitigation solutions.

 

Our certified security architects assist clients by assessing their OT environment and creating concepts for improving security according to best practice approaches. In addition, our security engineers help implement measures like isolation, hardening, segmentation, and asset and anomaly detection and can even run the required solutions as a managed service.

Businesses finally gain insight and control and introduce the latest security technologies to industrial and legacy environments.

Defense in depth beyond IT

The defense in depth or onion approach describes a multi-layered security architecture that requires attackers to overcome several security barriers. While this approach has been applied to IT environments for many years, current OT networks often lack the design and solutions to create the same level of defense and resilience.

 

 

With more than 20 years of experience in the design, implementation, and 24/7 operation of complex network and security environments, as well as insights into the specifics of producing industries,  we can apply the security-in-depth principle, creating a multi-layer defense to mitigate attack vectors. We help security officers finally gain insight into their OT network’s security, enabling them to react to critical events

What you get

• Custom and client-specific analysis of the “IS” situation by security architects
• Active inspection of attack surface by BE offensive security specialists (ethical hackers) to understand exposures and vulnerabilities
• Creation of a custom concept to increase security through specific measures (isolation, segmentation, hardening, asset and anomaly detection and mitigation, endpoint protection, physical security, etc.)
• Option for procurement of required hard- and software
• Installation and configuration of security components, or helping client staff to do so
• Choice of 24/7 support with tight SLAs or fully managed service
• Enabling real-time visibility of all ICS assets and networks and SCADA protocols and commands
• Automated collection and assessment of OT network communication
• Anomaly detection and alerting
• Reduction of “vulnerability windows” between detection and resolution
• Proven IT technologies are applied to OT network (IPS, Anti-Bot, Anti-Virus, etc.) without requiring changes to ICS components