Assessing control systems means handling some of the most sensitive information an operator has: network drawings, configurations, vulnerabilities and incident details. We treat it accordingly.
Before any data is shared
- NDA first. A non-disclosure agreement is signed before any drawings, configurations or findings change hands.
- Data handling agreed in writing. For each engagement we agree what we need, how it is transferred, where it is stored, who can access it and when it is returned or deleted.
- Only what's needed. We ask for the minimum information the scope requires.
While we work
- Encrypted transfer through a channel you choose or approve, never ordinary email attachments for sensitive material.
- Encrypted storage on company-controlled devices and services, with access limited to the named people on the engagement.
- No client data in public AI tools or unapproved cloud services.
- Named, vetted people only. Everyone on an engagement is under a confidentiality agreement, and specialists only see what their task requires.
- Passive, safe methods. We don't scan or test live control systems unless you authorise it in writing, with an agreed method and supervision.
When the engagement ends
- Return or deletion of your data, as agreed, with written confirmation.
- Findings stay confidential. We never name clients, projects or findings in marketing without written permission.
If something goes wrong
If we ever suspect your data has been exposed, we tell you promptly, explain what happened and work with you on the response.
Data from this website
Messages sent through this website are used only to reply to you. There are no tracking cookies. See our privacy notice for details.