OT and ICS Security
ICS/SCADA Architecture Assessment
We analyze the data flows and trust relationships between SCADA servers, historians, engineering workstations and field devices. We assess how the architecture aligns with the IEC 62443 zones and conduits approach.
What it is
The assessment examines the control layer using the Purdue model and the IEC 62443 zones and conduits approach. It maps data flows between SCADA servers, historians, engineering workstations and field devices. For each zone, it compares the target security level with the current state. This reveals how an issue in one zone could affect another.
Scope
- Identifying zones and conduits by Purdue model layers
- Data flows between SCADA servers, historians and engineering workstations
- Trust relationships and crossing points between zones
- Comparing the target security level and current state for each zone
- Configuration and redundancy review of devices such as the core switch and firewall
The need
When organizations need it
- When designing a new SCADA project and the architecture needs to be correct from the start.
- When the control network has expanded over time and zone boundaries have become unclear.
- When IEC 62443 or a customer audit requires a review of the architecture documents.
Method
How we work
-
Documents and site
We obtain the current topology documents and verify their accuracy with your operations team.
-
Zoning
We separate the layers using the IEC 62443 zones and conduits approach and set the target level for each zone.
-
Gap analysis
We compare the current state to the target and identify risky transitions between zones.
Outcome
What you have at the end
An architecture diagram with zones and conduits, and a list of gaps between the current state and the target security level for each zone.
Frequently asked questions
What do IEC 62443 zones and conduits mean?
A zone is a logical area where devices with similar security needs are grouped. A conduit is the communication path between zones. This distinction ensures protection is applied appropriately.
Does the assessment require stopping production?
No. The assessment is based on document review, discussions with the operations team and configuration review.
OT and ICS Security
Other services in this area
Let's talk about this service.
Tell us briefly what you need. We will agree on the scope and timing together in the first meeting.
Schedule a Meeting