Security Assessments are used to evaluate the security status of an automation system or factory. Based on the technical analysis and assessment, potential weak points are identified and security measures recommended. The Risk Analysis can then be used to make well founded decisions regarding the orientation of the security architecture and take any further measures required.

Portfolio

IEC 62443 Assessment

Article No.

9AS1411-3AA11-1AA1

9AS1311-3AA11-2AA1

Assessment of an automation system towards compliance with IEC 62443. The tool supported assessment will be held with interviews on the basis of the standard for IT Security in industrial automation systems. The report will show the gaps between the automation system under consideration and the IEC 62443 and measures to close the gaps. Travel fee not included.

ISO 27001 Assessment

Article No.

9AS1411-1AA11-1AA1

Security assessment workshop for industrial plants. Interview based assessment covering all aspects of industrial security, from organizational measures to product specific technical implementation. Covering Siemens and 3rd party equipment. Based on current standards e.g. ISA 99 and ISO 27001. In the report the current risk level, identified vulnerabilities and the completeness of the implemented security measures will be provided. Documentation also includes prioritized recommendations how to improve and enhance the security level of a system. Baseline for decisions. Travel fee not included.

SIMATIC WinCC/PCS 7 Security Assessment

Article No.

9AS1411-2AA11-1AA1

One-day Security Assessment Workshop for PCS 7 and WinCC. Interview-based assessment covering all aspects of industrial security, from organizational through to product-specific measures. Based on the latest standards, such as ISA 99 and PCS 7/WinCC Security Plan. The report describes the current risk level, the weak points identified, and the thoroughness of the measures implemented. The documentation also includes prioritized recommendations as to how the security level can be improved. Basis for decisions. Travel costs not included.

Risk & Vulnerability Assessment

Article No.

9AS1431-1AA11-1AB1

Identify, classify and evaluate risks for ICS environments (Industrial Control System). Incl. data gathering, criticality analysis and recommendations for risk mitigation controls.