A customer has put cybersecurity requirements into our project.
Translate the specification into a defined engineering scope, responsibilities and delivery evidence.
Services
Turn an OT cybersecurity requirement into defined engineering work
Use Engineering Support for active project and delivery needs. Start with a Readiness Review when applicability is unclear, or a Gap Assessment when the requirements are already agreed.
What has happened in your project or organisation?
Choose the situation closest to the problem you need to resolve today. Each route leads to a scoped service rather than a compulsory sequence.
We have a project heading towards FAT or SAT and need to produce evidence.
Define the checks, review available records and close out actions before assurance or handover.
We have been told to align with IEC 62443 but do not know what applies.
Clarify the organisational role, boundary, applicable lifecycle context and available evidence first.
We know which IEC 62443 requirements apply and need to know where we stand.
Compare current arrangements and evidence with the agreed requirements and record the gaps.
We need help developing the architecture, documentation or actions.
Add specialist OT cybersecurity capacity to define, review and deliver the required work package.
We make an industrial product and need to establish an IEC 62443-4-1 development process.
Establish the applicable baseline, assess existing development evidence, then scope implementation support where needed.
We are an asset owner and need OT cybersecurity governance, procedures and evidence.
Use a readiness review to establish the starting point, or Engineering Support when the work is already defined.
Choose the level of support that fits the work
Primary service for active work
OT Cybersecurity Engineering Support
When the requirement has already become part of the job.
Meridian can work alongside your engineering or project team to define the cybersecurity scope, resolve technical requirements and produce the evidence needed for design review, suppliers, FAT, SAT, assurance and handover.
View Engineering Support scopeA work package can include
- Cybersecurity risk assessment
- System and system-under-consideration definition
- Zones and conduits
- Network architecture and segmentation
- Supplier cybersecurity requirements
- Remote-access review
- IEC 62443 documentation and evidence
- Secure configuration and hardening
- FAT/SAT cybersecurity support
- Action tracking and close-out
Need a defined starting point?
Use a bounded review when the immediate need is to establish what applies or assess known requirements. You can enter through either route without completing the other services first.
What actually applies to us and what should we do first?
IEC 62443 Readiness Review
Establish the boundary, applicable lifecycle context, available evidence and next engineering work before a detailed IEC 62443 assessment or project decision.
View scope and deliverablesWe know the requirements. Show us what is missing.
IEC 62443 Gap Assessment
Requirement-by-requirement review of current arrangements and evidence against an agreed IEC 62443 baseline, producing a classified gap register and remediation roadmap.
View scope and deliverablesCapabilities support the three services
Risk assessment, zones and conduits, segmentation, documentation and FAT/SAT support are technical activities within an agreed engagement. They are not additional commercial products.
How common OT cybersecurity terms map to the work
Searches for an OT cybersecurity consultant, industrial cybersecurity consultant, ICS cybersecurity consultant or SCADA cybersecurity review usually leads to the same first scoping question: do you need an environmental baseline, a defined risk assessment or project engineering support?
A defined OT cyber risk assessment follows a scenario and consequence method. OT network segmentation starts from required communications and produces a zone, conduit and migration design.
For an IEC 62443 requirement, the IEC 62443 consultant route explains how readiness, gap assessment, system risk and project evidence differ before you select the work.
Not sure which engagement fits?
Use the 30-minute introductory call to outline the system, decision, project stage and evidence currently available. Keep sensitive site details out of the booking form.