Stakeholder
Supplier & Integration Project Teams
For people working in system integrators, product suppliers, OEMs and package suppliers. The organisation's IEC 62443 responsibility is identified separately before requirements are assigned.
Decisions and constraints for this role
Questions likely to need resolution
- cybersecurity requirements
- FAT comments
- evidence requests
- client specifications
- IEC 62443 interpretation
- package system integration
- supplier close-out evidence
Review focus
Meridian helps suppliers and integrators clarify architecture requirements, prepare cybersecurity deliverables and close review comments.
Work and outputs
Engineering work
- Clarify cybersecurity requirements, architecture assumptions, and evidence expectations for supplier packages.
- Review package interfaces, remote access routes, account management, hardening evidence, and test records.
- Help suppliers respond to client review comments with practical engineering evidence and close-out logic.
- Support integration discussions where vendor scope meets site OT architecture, operations, and assurance requirements.
Records produced
- Supplier cybersecurity deliverable review
- FAT/SAT cybersecurity checklist
- Evidence close-out tracker
- Package interface register
- Client response notes for review comments
Related industries
These sectors commonly create the operating constraints, supplier dependencies, and assurance pressures relevant to this audience.
Gas & Energy Infrastructure
OT cybersecurity support for gas transmission, energy infrastructure, compressor control, telemetry, vendor access, safety interfaces and assurance requirements.
Industry approach
Manufacturing
Practical support for production network segmentation, supplier-maintained machinery, engineering laptops, and line-level downtime risk.
Industry approach
Offshore & Process Industries
Assurance for vendor package systems, remote support links, strict change control, safety interfaces, and constrained maintenance windows.
Industry approach
Renewables
Support for distributed renewable assets, remote monitoring, supplier platforms, telemetry links, and operational data transfer.
Industry approach
Nuclear & High-Hazard Environments
Evidence-focused assurance for regulated engineering environments with strict change control, supplier review, and documentation requirements.
Industry approachRelevant technical capabilities
These engineering activities can be included in a scoped engagement.
Assure
Engineering Assurance
Independent review of supplier designs, FAT/SAT evidence, cybersecurity documentation, and project close-out evidence for control system delivery.
View capability detailsAssure
IEC 62443 consultancy and project support
IEC 62443-aligned engineering support for project teams and integrators: define the system boundary, review supplier requirements and organise traceable design and verification evidence.
View capability detailsDocument
Documentation & Design Support
Network drawings, IP schedules, firewall schedules, interface registers, cybersecurity procedures, and FAT/SAT documentation that support assurance and maintainability.
View capability detailsSegment
Network Segmentation Engineering
Zones, conduits, architecture drawings, firewall schedules, and migration planning for live industrial networks.
View capability detailsSpecialist support for the teams delivering industrial systems
Meridian works alongside integrators, engineering contractors, OEMs and specialist suppliers when OT cybersecurity expertise is needed within a wider industrial project.
Meridian can work alongside your engineering team when a customer specification calls for IEC 62443 alignment, network segmentation, secure configuration or cybersecurity documentation. We agree the work package, responsibilities and evidence needed for your project stage.
Related services
Choose this when your project needs specialist engineering capacity. A defined OT cybersecurity work package for risk, architecture, design review, supplier interfaces and assurance evidence within an active industrial project.
Start here if you are unsure what applies or where to begin. Establish the boundary, applicable lifecycle context, available evidence and next engineering work before a detailed IEC 62443 assessment or project decision.
Review supplier cybersecurity deliverables
Use the discovery call to discuss the responsibility, project stage, evidence gap or operating constraint without sharing sensitive site details.