Assess & Plan Services:
We help companies better understand their current environments, what assets they have, where they are, and how they’re connected.
Identifying assets and documenting through network drawings and detailed mapping are all key to planning and putting risk assessments in place.
Armexa “3d” OT cyber assessment model
Validated System Design Review
Understanding of system architecture and vulnerabilities in the implementation
- Network
- Architecture
- Segmentation
- Dataflow & Path analysis
- Log review
- Endpoints
- Servers/workstations
- Network devices
- -ICS devices
Maturity/Compliance Gap Assessment
Informs management of security posture relative to standards, regulation, and industry peers
- Gap & Maturity assessment of technical and procedural conformance to the NIST CSF & ISA/IEC 62443
- Other reference regulations and standards, if applicable
Consequence-based Risk Assessment
Informs management of the greatest operation risks & most cost-effective mitigations
- Cyber HAZOP & Bowtie style risk assessment per ISA/IEC 62443-3-2
- Zone & conduit partitioning
- Risk Ranking
- Risk mitigation planning
