New managed cybersecurity services for your OT systems

What is your current knowledge of your OT installed base?

You can select up to 4 items

I have an inventory of assets and applications installed at my facility

I know versions of Operating Systems, Applications and Firmware

I know obsolescence level, e.g. which assets require to be upgraded or replaced

I know associated risks if the upgrade is not done

Which OT systems are the most important to protect at your facility?

0 star = Not applicable / 1 star = Least important / 5 stars = Most important

Security Monitoring Service

A security monitoring service includes real-time, or near real-time, events and activities monitoring on all your organization's critical OT systems. It ensures continuous compliance to policies and standards. It reduces risks by monitoring cyber threats that could impact your operations.
Security monitoring services can encompass different aspects of monitoring. Please let us know what you would prefer.

Your advice

Do you already have an OT security monitoring service in place?

No and I do not wish to have one in the future

No but I would like to have one in the future

Yes, installed and managed by an IT or OT service provider

Yes, installed and managed by our team

Other, please specify

Please rank the following security monitoring service features in order of importance:

Drag and drop to rank items

Establish an OT asset inventory (with associated OS, applications, firmware)

Set up and monitor OT security through a centralized security monitoring platform: create and provide adhoc KPI, dashboards and reports

Support to security log auditing and analysis

Support to platform maintenance and continuous adaptation to OT systems and threat evolution

Detect vulnerabilities: obsolete patch, obsolete firmware, weak protocol, password weakness….

How would you prefer to have access to this service in the future?

Buy technology and do myself

Contract an IT service provider (i.e Atos, Cap gemini, IBM, Accenture…)

Contract an OT vendor (i.e. ABB, Eaton, Schneider Electric, Siemens…)

Mixed model, partially internal and external

Anomaly and threat detection service

An anomaly detection service is designed to secure your operational technology (OT) from cyber-attacks. It monitors your network and assets and alerts you of suspicious activity through threat detection. It works by learning from your network under normal conditions and using it as a benchmark to compare all future activity. Detecting any potentially malicious activity as early as possible, and providing mitigations recommendations buys you valuable time to confirm the problem and lock down your network if necessary to minimise damage.
Anomaly detection services can encompass different aspects of threat detection. Please let us know what you would prefer.

Your advice

Do you already have an OT anomaly and threat detection service in place?

No and I do not wish to have one in the future

No but I would like to have one in the future

Yes, installed and managed by an IT or OT service provider

Yes, installed and managed by our team

Other, please specify

Please rank the following anomaly detection features in order of importance:

Drag and drop to rank items

Supplement or complement my SOC (Security Operations Center) for my OT systems

Provide response and remediation recommendations

Detect, analyse and triage security issues: malware, intrusion, port scan, change of configuration, network traffic anomalies…

Establish and continuously update a solid threat model & baseline for my OT system

How would you prefer to have access to this service in the future?

Buy technology and do myself

Contract an IT service provider (i.e Atos, Cap gemini, IBM, Accenture…)

Contract an OT vendor (i.e. ABB, Eaton, Schneider Electric, Siemens…)

Mixed model, partially internal and external

Incident response & recovery service

An incident response and recovery service helps to get prepared and manage the consequences of a security breach or cyberattack. It can cover various aspects: incident identification, scenario planning, response procedure creation, damage mitigation, management of backups and recovery capabilities.
Please let us know what your preferences are for such a service.

Your advice

Do you already have an incident response & recovery service in place?

No and I do not wish to have one in the future

No but I would like to have one in the future

Yes, performed by an IT or OT service provider

Yes, performed by our team

Other (please specify in comments)

Please rank the following incident response and recovery features in order of importance:

Drag and drop to rank items

Test backups and operate backup-restore platform for servers, PCs, PLCs

Mitigation of detected vulnerabilities: conduct remote or on-site actions to mitigate vulnerabilities

Post engagement forensic analysis to improve security and prevent incidents from happening again

Define and qualify security incidents, document scenario and response procedures

Remediation of security alerts: conduct remote or on-site actions to remediate alerts till complete recovery

How would you prefer to have access to this service in the future?

Buy technology and do myself

Contract an IT service provider (i.e Atos, Cap gemini, IBM, Accenture…)

Contract an OT vendor (i.e. ABB, Eaton, Schneider Electric, Siemens…)

Mixed model, partially internal and external

What is the main reason preventing you from buying OT cybersecurity services from a service provider?

OT cyber risks not being seen as so critical (e.g. air gap protection being seen as good enough protection)

Preference to rely on in-house expertise and resources

Unclear ROI (Return Of Investment) benefits, difficulty to justify a business case

Lack of domain expertise preventing from making a decision

Difficulty to find the right service provider (please specify why in the comment)

Others, please specify which ones in comment

Which of the 4 services described above are most important to you?

You can select up to 4 items

Security Monitoring Service

Anomaly and threat detection service

Patch management service

Incident response & recovery service

What is the best way to contact you?

Phone, email, LinkedIn,...

Security Monitoring Service

Your advice

Anomaly and threat detection service

Your advice

Patch Management service

Your advice

Incident response & recovery service

Your advice