Enterprise Wide Security Architecture (IT & OT)

Industrial Cyber Security for Mining

Enterprise Wide Security Architecture (IT & OT)

Challenge

SIS was engaged to develop a risk-driven Enterprise-Wide Security Architecture (EWSA) for delivering secure information systems – both for Information Technology (IT) and Operational Technology (OT) environments.

The designed detailed how OT systems should be designed, built and operated across all layers of the ISA-95 model. 

Solution

The following architectures were developed in sequence:

  • Conceptual Architecture Design – Strategic view of processes (attributes);
  • Logical Architecture Design – Information flows & transformations (security services);
  • Physical Architecture Design – Data flows & system interactions (security mechanisms); and
  • Component Architecture Design – Protocols & step sequences (tools, products, standards).

If you’d like to know more about our many years of experience in providing industrial cyber security solutions:

Get in touch >

More Success Stories
Power

Meeting European Union
NIS Directive obligations

SIS’ bespoke approach towards the assessment
of critical infrastructure enabled a UK power
company to determine compliance to the EU NIS
Directive, and to develop an improvement plan
towards strengthening resilience to cyber
threats.

View Case Study >

Oil & Gas

Technical vulnerability
and risk assessment of
OT infrastructure

Via a technical vulnerability and risk
assessment of OT infrastructure for a gas
pipeline company, SIS successfully assisted
the gas pipeline company to understand their
current-state risk posture in order to
determine what an appropriate risk appetite
(risk level) is, and the prioritisation of
mitigation actions in order to reduce the
level of risk exposure to cyber threats.

View Case Study >

Mining

Top-down, enterprise wide
security architecture

SIS adopted a top-down, risk-driven approach
to develop an enterprise-wide security
architecture for a resources company, driven
by, and integrated with the organisation’s
broader business strategy, focused on
technology optimisation to deliver secure mine operations.

View Case Study >

Health

Stress & penetration
testing network connected
medical devices

SIS’ specialist industrial cyber security
testers applied the latest exploit tools and
techniques to perform stress and penetration
testing of network connected medical device
technologies, to assess risks to the
reliability of devices, and ultimately the
safety of patients.

View Case Study >

Water

Implementing a Cyber
Security Management
System (CSMS)

As a result of SIS’ Operate and Maintain services, a regional water agency in Australia was able to implement a Cyber Security Management System (CSMS) provides the organisational rigour to ensure
infrastructure is resilient to escalating cyber threats, and ensuring the right security controls are in place to mitigate risk.

View Case Study >

Transport

Audit identifies
Security high-risk areas of focus and remedial priorities

SIS’ industrial cyber security audit services
enabled a government statutory authority to
benchmark the security posture of state
transport agencies, identifying cyber
security risks and prioritisation of key
actions for risk mitigation.

View Case Study >

Critical Manufacturing

Training helps metals
manufacturer create a
stronger security culture

SIS’ industry-leading industrial cyber
security training was able to help a metals
manufacturer create a stronger culture of
security, harmonising with the organisation’s
rigorous safety culture, fostering a
commitment to industrial cyber security from
plant operators and administrators,
encouraging users to act responsibly and thus
operate more securely.

View Case Study >

Neutralising

the threat

Protect your critical assets from the threat of cyber attack.

Get in touch with our industrial cyber security specialists.

Contact SIS