IEC 62443 covers OT security for asset owners, system integrators and product suppliers, zones and conduits, security levels, secure development and component requirements. Parts can be certified. We use it to design OT security programmes for manufacturing, energy, water and oil and gas, connected to ISO 27001 governance.
Who it is for
- Asset owners with industrial control systems
- System integrators
- OT product manufacturers
What you gain
- Risk-based OT network design
- Products and integrations buyers trust
Your path to certification
Gap assessment
We compare what you do today with every requirement and control, then give you a prioritised gap report and a realistic timeline.
Design and documentation
Scope, policies, procedures, risk methodology and records, written to fit how your teams actually work, not a template binder.
Implementation and training
We help owners put controls in place, train the people who run them and start collecting evidence.
Internal audit and management review
An independent internal audit and a structured management review prove the system works before the certification body looks at it.
Certification audit support
We prepare you for Stage 1 and Stage 2 with your chosen accredited certification body and help close any findings quickly.
Surveillance and continual improvement
Optional managed support keeps evidence current through annual surveillance audits and the three-year recertification.