Find out what your control network is really doing.
Operational technology and industrial control systems security advisory for pipeline, energy, and critical-infrastructure operators.
Background
I spent a decade at a regulated pipeline operator, where my executive oversight covered network architecture, enterprise business continuity, the SCADA platform, and the TSA Pipeline Security Directive controls that govern it, all structured against NIST CSF. That included direct involvement in on-site TSA audit meetings. I work from NIST CSF, NIST SP 800-82 Rev. 3, and IEC 62443, and I'm a member of InfraGard and the International Society of Automation.
Services
Assessment & readiness
Independent, vendor-neutral assessments mapped to NIST CSF and IEC 62443, and the regulatory requirements you already answer to.
Network & systems
Architecture review and segmentation design for the SCADA and industrial networks running the operation.
- SCADA and industrial network security
- IT/OT segmentation design and review
- Infrastructure resilience
TSA-designated operators
If TSA has notified your pipeline system, hazardous liquid line, or LNG facility that it's critical, two directives are already running against you. SD Pipeline-2021-01G requires a named Cybersecurity Coordinator and incident reporting to CISA. Separately, SD Pipeline-2021-02G requires an approved Cybersecurity Implementation Plan, backed by a Cybersecurity Assessment Plan that covers one-third of the program every year and 100 percent of it over any three-year period.
Directives in force
- SD Pipeline-2021-01G
- Enhancing Pipeline Cybersecurity
- SD Pipeline-2021-02G
- Pipeline Cybersecurity Mitigation Actions, Contingency Planning, and Testing
Field notes
- What is IEC 62443? The OT security standard series explainedIEC 62443 is a series of standards for industrial automation and control system security. What the parts cover, how zones, conduits and security levels work, and who the standard applies to.
- What is NIST SP 800-82? The OT security guide explainedNIST SP 800-82 is the federal guide to securing operational technology. What Revision 3 covers, how it differs from earlier versions, and how operators use it.
To discuss an engagement