Services / Project Lifecycle Cybersecurity Support & Inspections
Service
Project Lifecycle Cybersecurity Support & Inspections
Each project has its own cybersecurity part that must be cleared. For owners, we act as the independent OT security inspector at each milestone. For vendors, EPCs and integrators, we prepare the procedures, checklists and compliance statements and support them until the owner accepts. On any one project we work for one side only.
What's included
- Engagement for a single stage or the whole project lifecycle
- Review against the project specification, IEC 62443 and the national rules that apply
- Cybersecurity test procedures for FAT and SAT, including firewall validation and system hardening checklists
- Hardening guardrails procedures and compliance statements
- Inspection and witnessing at FAT, SAT, TOC and FAC; the vendor's team runs the tests
- Structured comment registers and open points tracked to closure
- Compliance statement against the specified standards (we don't issue certifications)
Stage by stage
| Stage | What we review | What you get |
|---|---|---|
| FEEDConcept / FEED | Cybersecurity requirements, risk assessment inputs, target security levels | Requirements review memo |
| SOWScope of work & specification | Cybersecurity clauses, applicable standards and national rules, deliverables list, acceptance criteria | Specification comments or drafted cybersecurity clauses |
| BIDBidder offer evaluation | Technical offers against the cybersecurity requirements: compliance matrices, deviations, exclusions, clarifications | Technical bid evaluation report and clarification questions |
| DESDetailed design | Architecture, zones and conduits, hardening, remote access, logging, backup and patching design | Design review report and comment register |
| FATFactory acceptance test | Security test procedures, then witnessing of tests at the vendor's factory | FAT security witness report |
| SATSite acceptance & commissioning | On-site security tests, integration, remote-access verification, configuration baselines | SAT security witness report |
| TOCTake-over certificate | Open findings and punch list, documentation completeness, handover readiness | TOC cybersecurity readiness assessment |
| FACFinal acceptance certificate | Closure of findings during the defects period, patch and backup status, as-built documents | FAC cybersecurity readiness assessment |