Services / OT Cybersecurity Audit, Gap Assessment & National Standards Compliance
Service
OT Cybersecurity Audit, Gap Assessment & National Standards Compliance
Every country has its own critical-infrastructure security rules. We assess where you stand against them and IEC 62443, including the process side (policies, roles, records and evidence), and show what to fix first. Assessment is by interviews, document review and site walk-downs, without touching live systems.
What's included
- Scoping of sites, systems and the standards that apply
- Document-led and passive review of architecture, assets and network
- Gap assessment against IEC 62443-2-1, 3-2 and 3-3
- Mapping to national rules: Qatar's National ICS Security Standard, Saudi NCA OTCC, UAE Information Assurance Standards and sector rules, Oman, Kuwait and Bahrain requirements, India's CEA cyber security regulations for the power sector, and others
- Process-side review: policies, procedures, roles, records and evidence
- Zone and conduit review
- Findings register with evidence, clause references and risk ratings
- Prioritised remediation roadmap and executive summary