Industry · Energy · Infrastructure
Security and resilience in business context: what matters, what doesn't, and what it's worth. I work where downtime means safety incidents, lost production or broken service commitments.
Featured · Portfolio
How an OT security programme across more than forty manufacturing sites put asset inventory and connected response ahead of new segmentation hardware and a separate response organisation. The price was leaving segmentation to site-by-site investment or risk acceptance, and the return was incident response in minutes instead of weeks.
Blog
Several hundred French supermarkets lost their chilled stock in one night through refrigeration controllers a contractor looked after. The owners assumed the risk was taken care of, and nobody in the chain was paid to bring it to them. A risk explicitly considered can be priced. A risk you assumed was taken care of is priced only once, on the day of the loss.
Blog
Seventeen draft standards now show what a CRA claim will consist of. The manufacturer declares its own scope, some requirements are handed to your environment, and for operational technology no standard exists yet.
Blog
Business continuity plans and disaster recovery plans are not the same thing, and the interdependencies between business, IT and OT decide whether you pay for resilience up front or during the incident.