OT security assessment
A risk assessment of your plant networks to IEC 62443-3-2, with zones, target security levels and a fix plan.
01 · Deliverables
What you get
A plant cannot be secured like an office: production comes first, devices live for decades and many cannot be patched.
- An asset and network inventory of the plant, built with your engineers
- A zone and conduit diagram with a target security level per zone
- A risk assessment following IEC 62443-3-2
- A gap list against IEC 62443-3-3 system requirements
- A remediation plan ordered by risk and production impact
- Rules for vendor remote access and change control
02 · Process
How it works
- 01
Authorise
Scope, sites, contacts and the rules for any device query are signed by the plant owner before anything begins.
- 02
Observe
We walk the plant with your engineers and capture traffic passively; no active scanning on a live control network.
- 03
Assess
Zones, conduits and target security levels are set and each one is assessed against IEC 62443-3-3 requirements.
- 04
Plan
You receive the findings and a plan ordered by risk, with each fix matched to a maintenance window and an owner.
03 · Scope
Scope it now.
Answer a few questions, add your name and email, and press Send. A person at Clockborn has it at once, and you get a copy by email.
Prefer to write freely? hello@clockborn.com
04 · FAQ
Questions
Will the assessment stop production?
No. We observe passively: a copy of network traffic, documents and walks with your engineers. Nothing is sent to controllers on a live network. If a device must be queried, it is done in a maintenance window, with your engineers, and only with written agreement.
Is this an IEC 62443 certification?
No. Certification of components, systems or processes is issued by accredited bodies. We assess your plant against the standard, set target levels with you, and leave you a clear record of the gaps so any later certification or audit starts from facts.
How is this different from an IT security review?
Plant systems are judged by safety and production first, use industrial protocols, and often cannot be patched or rebooted. The assessment follows the plant’s own risks, involves the process engineers, and recommends controls that work around devices rather than on them.
05 · Services
Related services
- ServiceSecurity consultingAn independent view of your security weaknesses and a prioritised, practical plan to fix them.
- ServiceSecurity hardeningServers, cloud accounts, devices and apps locked down against a recognised benchmark, with every change recorded.
- ServiceCompliance auditA readiness review against the data protection or security standard you must meet, with gaps and fixes listed.
- ServiceManaged securityDefensive monitoring of your systems, with alerts triaged and incidents contained by people who know your setup.
06 · Software
Software it applies to
- SoftwareOT and ICS securityVisibility and segmentation for plant networks, designed around IEC 62443 zones and conduits.
- SoftwareNetwork securityFirewalls, segments and remote access managed as code, with traffic visibility to prove the rules work.
- SoftwarePLC and SCADAControl logic, operator screens and plant data links, from the PLC to the historian and the MES.