Winner! Cyber Consultant of the Year at the 2026 Australian Cyber Awards Read >

Winner! Cyber Consultant of the Year

Real-world OT security
thinking and
disruptive insights

Blog

Curated industrial cyber security content to help you stay ahead of the cyber threat.

Follow us for the latest updates

The Certification trap: Why experience outweighs credentials in OT security

A post from our Founder & Principal CEO, Dr. Christopher Beggs. A month ago, a client told me I needed to complete a specific OT security training course before they’d engage us on a project. Twenty...

Insight

An OT NIDS is not a SOC

Someone in the room states confidently, “We’ve got a SOC now.” You ask for clarification. They point to the network intrusion detection system they installed six months ago, a rack-mounted appliance, a dashboard, and a vendor...

Insight

Fast Security is Fragile Security: Why OT Requires a Methodical Approach

The Crisis Response That Backfired A utility organisation faced mounting pressure to demonstrate progress on OT security. Internal agendas collided with executive impatience. The solution? Deploy an OT Security Operations Centre. Fast. No readiness assessment. No...

Insight

When CapEx does more for OT Security than your security budget

A CISO presents a modest cyber security budget to the board. The numbers are tight. The justification is careful. Every line item is defended. Meanwhile, three floors down, engineering just approved a multi-million-dollar system upgrade. New...

Insight

The Principle Method: Principle #6 – OT Security Compliance

Compliance isn’t the goal. It’s the baseline. The OT Security Compliance principle in the Industrial Cyber Security Principle Method™ helps organisations not only meet regulatory obligations but do it in a way that supports real security...

Insight

OT Security Focused

If you’re securing OT with an IT playbook, you’re already behind. The OT Security Focused principle in the Industrial Cyber Security Principle Method™ demands total commitment to the unique world of operational technology. That means no...

SIS conducted a risk assessment of our operational technology environment and we were very impressed with their approach, methodology, execution, and delivery. They are adaptable, technically astute, and demonstrated a strong ability to fully understand business requirements specific to the oil and gas sector.

The project provided our organisation with a clear view of our cyber security maturity and highlighted the range of threats that could impact our systems at any time. As a result of the assessment, several mitigation steps have already been implemented based on SIS’ key recommendations.

SIS delivered an Information Security Management System framework that ensured governance was appropriately embedded across ICT operations, including business critical control systems. This significantly strengthened our audit compliance posture against recognised industry standards.

SIS effectively identified the required security controls to ensure essential services such as patching, configuration management, data backup, and secure remote access were available across both IT and OT environments for our new ADMS platform. Their familiarity with OT security is exceptional.

SIS’ tailored methodology for control systems testing demonstrated a high level of specialist expertise in this domain. They also showed strong flexibility in accommodating changing schedules and efficiently mobilising resources to meet critical production deadlines during a major network management system upgrade.

SIS consultants applied a professional and structured approach to a complex OT enablement scenario. This resulted in comprehensive designs covering key functional and non functional requirements, while also identifying security risks and the supporting process framework. SIS is best in class for IT and OT integration work.

SIS’ level of expertise in operational technology security is outstanding.

See how
your organisation
stacks up against
the benchmark

Put your organisation to the test with the SIS Industrial Cyber Security Assessment Scorecard.

Winner – Cyber Consultant of the Year (SME). Finalist for Cyber Professional of the Year in Industries, Logistics & Critical Infrastructure, and a Finalist for GRC Provider of the Year.

Real-world OT security
thinking and
disruptive insights

Follow us for the latest updates

The Certification trap: Why experience outweighs credentials in OT security

An OT NIDS is not a SOC

Fast Security is Fragile Security: Why OT Requires a Methodical Approach

When CapEx does more for OT Security than your security budget

The Principle Method: Principle #6 – OT Security Compliance

OT Security Focused

See how
your organisation
stacks up against
the benchmark

Get the latest insights
direct to your inbox?

Tell us a bit about you

Tell us a bit about you

Real-world OT security thinking and disruptive insights

Follow us for the latest updates

The Certification trap: Why experience outweighs credentials in OT security

An OT NIDS is not a SOC

Fast Security is Fragile Security: Why OT Requires a Methodical Approach

When CapEx does more for OT Security than your security budget

The Principle Method: Principle #6 – OT Security Compliance

OT Security Focused

See how your organisation stacks up against the benchmark

Tell us a bit about you

Tell us a bit about you

Real-world OT security
thinking and
disruptive insights

See how
your organisation
stacks up against
the benchmark