Our OT security engineers assess the cyber risk to your plant and control systems. Our method is aligned with IEC 62443-3-2. You get each risk rated, each decision recorded and practical steps to reduce it.
IEC 62443
.svg)
.svg)
.svg)
.svg)
See how Corgenta DRA helps you assess risk, plan treatment and record each decision.
Set the system boundary, assets, zones and conduits first.
Link each threat scenario to its risks, then rate likelihood and impact.
Check the countermeasures already in place, then add what each risk still needs.
Record each risk rating, the reason for it and the review outcome.
Bring your findings and records together for review and handover.
Our engineers support you from first scope to final report.
Agree the system under consideration, then split it into zones and conduits.
Find the worst-case risk for each zone, before any countermeasures.
Find threats and weak points, rate each risk and plan how to treat it.
Get a clear report your team can act on and keep up to date.
See anonymised examples of our work on industrial projects.
Composite of our HVDC work. A new HVDC link for a European transmission operator: zones and conduits, SL-Ts, security requirements and a treatment plan, set during design.
Composite of four engagements, 2017–2024. Water utilities and desalination plants in the Middle East: assessments, gap analyses and risk-based fix plans for live SCADA and DCS.
Single engagement, 2017–2018. Central IDMZ design, cyber risk method and full cyber security specifications for a new oil control centre in the Middle East. Part of national infrastructure.
See how we go from first scope to a clear report and next steps.
Define the system scope, boundaries and assessment inputs.
Group assets into zones and conduits as the basis for assessment.
Find credible threats and weak points, rate each risk and propose a target security level (SL-T) for each zone and conduit.
Check the countermeasures in place and recommend what else is needed.
Record the residual risk and agree decisions with your stakeholders.
Issue the reviewed report and agreed records for handover.
OT engineers with hands-on IEC 62443 experience, and a clear method that makes each risk decision easy to defend.
Experienced OT security engineers carry out each assessment.
We apply IEC 62443 to zones, conduits, threats and countermeasures on real industrial projects.
Each risk decision is recorded with the basis and reason behind it.
Clear outputs your engineers and operators can review and use.
