Service Scope
Services
Windlass Consulting works with pipeline, energy, and critical-infrastructure operators.
Windlass works with operators running SCADA or ICS environments who want a vendor-neutral read on where their program stands: refining and petrochemical, terminals and midstream, power generation and utilities, and other critical-infrastructure operators. That includes TSA-designated pipeline, hazardous liquid, and LNG operators managing a Cybersecurity Implementation Plan and its annual assessment obligation.
Assessment & readiness
An assessment starts from where the program actually stands, not a generic checklist retrofitted after the fact: architecture review, configuration audit, and protocol capture build the picture, kept passive by design so the work never sends OT traffic it wasn't built to handle. Findings map to NIST CSF and IEC 62443. For TSA-designated pipeline operators, that same assessment doubles as the SD-02 Cybersecurity Assessment Plan: one-third of the program covered every year, 100 percent over three, plus the annual report TSA expects to see.
- OT / ICS security assessments and advisory
- Regulatory and audit readiness
Network & systems
Segmentation design and review starts from how IT and OT are actually separated today, not how the diagram says they are, then maps a path toward a defensible zone-and-conduit model, the segmentation approach IEC 62443 is built around. Infrastructure resilience work ties that architecture back to business continuity: what keeps running, what fails over, and what the recovery plan assumes the network can no longer guarantee.
- SCADA and industrial network security
- IT/OT segmentation design and review
- Infrastructure resilience
Emerging risk
AI tools are showing up in operational and enterprise environments faster than most security programs have a policy for. This is a review of what's being adopted, where it touches OT and ICS-adjacent systems, and what guardrails belong around it before it's built into how the business runs.
- AI security
To discuss an engagement