Cyber Assessment & Vulnerability Scanning

The Novaspect Cyber Assessment & Vulnerability Scanning solution assesses the Cybersecurity state of OT systems to discover potential vulnerabilities and provide specific recommendations to help keep OT systems secure.

The Core Cybersecurity Assessment compares an industrial control system against Industry recommended best practices such as IEC/ISA 62443, determining areas for improvement. This includes the following main types of components:

THREE-STEP ASSESSMENT PROCESS
Includes initial field service consultation and data collection, report generation and analysis, plus presentation of findings.

DETAILED CYBERSECURITY REPORT
An in-depth presentation of findings to the Customer site team.

SUPPORT
Delivery of the cybersecurity report to management. Includes a consultative presentation, providing rationale for releasing funds towards improving the security of a system.

Novaspect’s Core Cyber Assessment & Vulnerability Scanning includes:
 

• Basic Cyber Assessment & Report
• Network Scan & Report
• Network Architecture Review & Report

All Core Cybersecurity Assessment & Vulnerability Scanning features, plus:
 

• CIS Benchmarks & Report
• Fulfilling essential requirements for IEC 62443 and other applicable standards
• Validating physical security, policies, and procedures of the environment
• Identifying specific remediation actions

The Essential Cybersecurity Assessment is the most cost effective first step that a customer can take to implement an effective cybersecurity solution onsite. This level of assessment brings the Novaspect team onsite to run local data retrieval tools as well as validate physical security and policies/procedures of the environment. Novaspect takes a holistic view of the environment and its cyber and infrastructure with the goal of identifying specific remediation actions that need to be performed.

All Core and Advanced Cybersecurity Assessment & Vulnerability Scanning features, plus:
 

• Cybersecurity Consultative Workshop Service on-site or via conference call
• Reviewing existing policies/procedures, control system drawings, best practices
• Exploring all aspects of currently installed cybersecurity processes and enforcement activities

ADVANCED CYBERSECURITY VULNERABILITY ASSESSMENT AND REPORT
Complete comprehensive baseline OT cybersecurity vulnerability assessment and report to identify control system security vulnerabilities and recommend mitigating actions to help achieve the site’s control system cyber security integrity requirements. This service element includes pre-assessment expert cybersecurity consultation service, either on-site or via conference call, reviewing existing policies/procedures, control system drawings, best practices and network architecture review. Then, an on-site visit is required to fully explore all aspects of the current installed cybersecurity processes, policies, procedures and enforcement activities.

CYBERSECURITY REMEDIATION ANALYSIS AND CONSULTATION SERVICE 
These consultative services can provide insight and remediation help where determinations on direction and next steps have already been determined locally. These experts can provide additional insight into cybersecurity improvements on the OT environment.