OT security for control systems – PLC, SCADA and HMI
PLC, SCADA and HMI systems control physical equipment – a breach can halt production or damage the plant, not just leak data. We assess and harden the security of your control systems in line with IEC 62443 principles.
- Certified partner – Autic, Nordic distributor of Ignition by Inductive Automation®
- Listed in Inductive Automation's integrator directory
- Ignition 8.3 Credentialed
- Certified in Siemens TIA Portal, Mitsubishi GX Works and Beijer X2/CODESYS
- OT cybersecurity training (IEC 62443)
- 12+ years of experience · Founded 2019, Stockholm
Common situations where we help
- Customers, insurers or NIS2 are imposing new OT security requirements
- Remote access to SCADA/HMI needs to be secured in line with IEC 62443
- The production network and the office network are not separated
- The building’s control systems are to be connected for remote monitoring
- An Ignition Gateway or SCADA system is installed but has never been hardened
Services
What we deliver
We build security in from the start – not as a layer bolted on afterwards.
- Assessment of the security of existing control systems and networks
- Separate networks for production and office, isolated line networks and structured addressing – with defined communication paths between zones
- Hardening of control systems: authentication, permissions and event logging
- Encrypted, authenticated remote access to SCADA, PLC and HMI
- Separation of the building network from the office network and secure remote monitoring of building controls
- Hardening of Ignition installations
IEC 62443 training
We have completed the OT Cybersecurity Training – IEC 62443 (2023) and work in line with the standard’s principles.
Segmentation
How we divide the network
The schematic shows the setup we build: the office network (IT) and the production network (OT) are separated, PLCs and HMIs sit in isolated line networks, and traffic between zones only passes through defined communication paths. Remote access is encrypted and authenticated. The exact division is adapted to your plant.
Office network (IT)
Email, business systems
Remote access
Encrypted and authenticated
Production network (OT)
SCADA server, historian
Line network 1
PLCs and HMIs, isolated
Line network 2
PLCs and HMIs, isolated
Where we work with OT security
The same principles – adapted to industrial plants, buildings and Ignition environments.
Industry and production
Separate networks for production and office, isolated line networks and hardening of PLC, HMI and SCADA: authentication, permissions and event logging.
Read more about SCADA services →Buildings
Once building control systems are connected for remote monitoring, they become part of the attack surface. We separate the building network from the office network, restrict communication paths and secure remote access.
Read more about building automation →Ignition
An unsecured Ignition Gateway is a production and operational risk. We harden the installation with segmentation, access control and authenticated, encrypted remote access to the Gateway and clients.
Read more about Ignition →Process
How we work
- 1
Technical call
(30 min, free)We walk through your facility, systems and goals.
Book directly - 2
Current-state review
We review the control systems, networks and remote access of the plant.
- 3
Measures
Segmentation, hardening and secure remote access – planned around the plant’s downtime windows.
- 4
Documentation
You receive documentation of what was done and proposed next steps.
FAQ
Common technical questions
How do you secure remote access to SCADA and PLCs?
Remote access is encrypted and authenticated, production and office networks are separated, and traffic between zones only passes through defined communication paths. We work in line with IEC 62443 and build security in from the start.
Can a building’s control system be monitored remotely in a secure way?
Yes. We separate the building network from the office network, restrict communication paths and secure remote access in line with IEC 62443.
Are you certified to IEC 62443?
No – we have completed the OT Cybersecurity Training – IEC 62443 (2023) and work in line with the standard’s principles. We do not issue statements that a plant complies with IEC 62443 or NIS2.
How quickly do we get a quote?
Within three working days of receiving the information we need – for example a description of the plant, the scope and the desired timeline.
Contact
Let's discuss your project
Whether you have a detailed specification or just a first idea – we're happy to have a technical conversation and help you find the right path forward.
Prefer direct contact?
Based in Stockholm. Assignments across Sweden, on-site and remote – abroad by arrangement. Professional liability insurance in place for all assignments.