Discuss Your DRA Project
Not Sure? Find Your Option
Risk software

IEC 62443 Risk Assessment Software for OT Teams

Corgenta DRA gives your team one place to run IEC 62443-3-2 aligned risk assessments, from threats to recorded risk decisions.

Request DRA Sandbox Access
Corgenta DRA risk canvas linking a threat to the risks it creates
How it works

One Workflow, From Scope to Release

Large circle with a gradient fill transitioning from light blue at the top to white at the bottom.Thin dark green semicircle outline with the flat edge along the bottom.
01

Define

Set your system context and assessment scope.

Large circle with a gradient fill transitioning from light blue at the top to white at the bottom.Thin dark green semicircle outline with the flat edge along the bottom.
02

Assess

Find threats and rate each risk.

Large circle with a gradient fill transitioning from light blue at the top to white at the bottom.Thin dark green semicircle outline with the flat edge along the bottom.
03

Treat

Choose countermeasures and record how each risk is treated.

Large circle with a gradient fill transitioning from light blue at the top to white at the bottom.Thin dark green semicircle outline with the flat edge along the bottom.
04

Review & Release

Approve decisions and release the assessment.

Key capabilities

What You Can Do with Corgenta DRA

01

Define Your System Context

Set the system boundary, assets, zones and conduits, and record a target security level (SL-T) for each.

Corgenta DRA system context view with zones and conduits
Corgenta DRA canvas linking a threat scenario to two risks
02

Assess Threats & Risks

Pick threat scenarios, rate each risk and see how it could affect your system.

03

Plan Risk Treatment

Check the countermeasures already in place and plan how to treat each risk.

Corgenta DRA risk treatment plan with countermeasures
Corgenta DRA risk decision record awaiting approval
04

Review Risk Decisions

Record each risk decision, check the evidence and get approval before you release the assessment.

Why Corgenta DRA

Why Corgenta DRA?

Structured Workflow

Follow the same steps every time, from defining your system to the final risk decisions.

Teal checkmark icon with rounded ends.
Guided assessment stages
Teal checkmark icon with rounded ends.
Consistent methodology
Teal checkmark icon with rounded ends.
Clear review process

Traceable Risk Decisions

Keep threats, risks, countermeasures and evidence linked from start to finish.

Teal checkmark icon with rounded ends.
Linked risk information
Teal checkmark icon with rounded ends.
Documented decisions
Teal checkmark icon with rounded ends.
Supporting evidence

Clear Documentation

Keep your assessment records in order, so every review follows the same rules.

Teal checkmark icon with rounded ends.
Structured assessment records
Teal checkmark icon with rounded ends.
Review and approval history
Teal checkmark icon with rounded ends.
Clear documentation

IEC 62443 Alignment

Run IEC 62443-3-2 aligned risk assessments with a set, governed method.

Teal checkmark icon with rounded ends.
IEC 62443-3-2 alignment
Teal checkmark icon with rounded ends.
Governed DRA methodology
Teal checkmark icon with rounded ends.
Structured risk assessment
Package comparison

Corgenta DRA Packages

Prices exclude VAT.

Compare features
EVALUATION
DRA Sandbox

Try Corgenta DRA with sample data, free for 14 days.

Free
14 days · 3 sample projects
Request DRA Sandbox
ONE ASSESSMENT
DRA Project

Complete one DRA for a single system.

£595 / one-off
1 system · 1 DRA · 1 user + free reviewer · 12 months’ access
Buy DRA Project
Recommended
REPEAT WORK
DRA Professional

For in-house teams who run DRAs on their own sites, again and again.

£3,000 a year
or £300 a month
1 user · Free reviewer seat
Team of up to 3: £6,000 a year or £600 a month
Buy DRA Professional
CLIENT DELIVERY
DRA Practice

For consultants and integrators who deliver DRAs to many clients.

From £4,800 / year
Pricing tailored to your needs
Enquire Now
Compare features
Feature
Sandbox
Project
Professional
Practice
How You Use It
Evaluate with sample data
i
Try the full DRA workflow on 3 sample projects. No real plant data. DRA Sandbox output is marked as a demo, not a real assessment.
Production DRA use
i
Assess your own real systems. You own the result.
Complete DRA Method
IEC 62443-3-2 aligned assessment
i
Structured Detailed Risk Assessment workflow aligned with IEC 62443-3-2. This does not certify a system or guarantee compliance.
Demo
SUC, scope and assessment basis
i
Set the system under consideration (SUC), its boundary, assumptions, exclusions and risk criteria.
Demo
Zones, conduits and target security levels
i
Record or link your zones, conduits and target security levels (SL-T), where they apply.
Demo
Threat scenarios and initial risk
i
Record the threats that matter and set the unmitigated (starting) risk.
Demo
Controls, treatment and residual risk
i
Link countermeasures, record how each risk is treated, then reassess what is left.
Demo
Evidence links and decision traceability
i
Link each decision to its evidence, so the assessment can be reviewed and defended.
Demo
Review, approval and controlled release
i
Review and approve the assessment, then release a locked version.
Demo
Reports & Deliverables
DRA report and risk register
i
Get the DRA report and the risk register behind it. DRA Sandbox output is marked as a demo.
Demo-labelled
Customer-owned structured export
i
Export your results as structured data (JSON or PDF) that you own and can hand over.
Versioning and reassessment
i
Keep each released version and reassess from it later. In DRA Project, this works within your one project.
Projects & Productivity
One real project / assessment
i
Complete a real assessment within the agreed licence scope.
Multiple concurrent projects
i
Run several projects at once, within your licence.
Copy a previous project
i
Start a new DRA by copying one of your own past projects as a draft.
Team collaboration and review
i
Work as a team with review and approval. Every licence includes a free reviewer seat. DRA Project is for 1 user; DRA Professional allows up to 3.
Evaluation only
1 user + reviewer seat
Client Delivery
Multiple unrelated external clients
i
Run DRAs for many separate client organisations. Upcoming release.
Upcoming release
Segregated client workspaces
i
Keep each client’s data and assessments apart. Upcoming release.
Upcoming release
Client portfolio management
i
See all your client assessments in one view: active, done and planned. Upcoming release.
Upcoming release
Client-branded deliverables
i
Issue reports with your own or your client’s branding, where agreed. Upcoming release.
Upcoming release
Controlled client reviewer participation
i
Let named client reviewers take part in reviews, with limited access. Upcoming release.
Upcoming release
Your own risk methodology
i
Use your own risk criteria and method across assessments. Future release, built when customers ask for it.
Upcoming release
Upcoming release
Get in touch

Ready to Explore Corgenta DRA?

Try the DRA Sandbox, or answer three quick questions to find your package.

Request DRA Sandbox Access
Not Sure? Find Your Option