OT-Security: Reducing safety risks in industrial environments

• The identification of vulnerabilities and their risk exposure
   
• The assessment of which platforms and systems are used and how the networking and interaction of the systems for manufacturing and process automation work together - as well as with conventional (Office) IT infrastructure - from a security perspective
   
• Assessment of the security measures in place in terms of security and safety
   
• Assessment of the technical security level of remote maintenance access, established standard IT components and availability requirements of communication networks and their monitoring
   
• Assessment of potential threats based on human errors and intentional attacks at device, network and application level. As part of this, our security experts look at, among other things, the degree of networking and the protection of production networks, as well as the misconfiguration and inadequate backup of components.
   
• Passive and active attacks on established ICS components such as SCADA systems, PLC, HMI, BFS and MES at system and network level
   
• The derivation and evaluation of organizational vulnerabilities, such as insufficient levels of documentation and regulations for IT security in the form of guidelines and processes

We will provide you with a detailed report that identifies specific comprehensible risks and vulnerabilities and proposes appropriate measures for their elimination.

The final report is always created individually and in an easily understandable form by our experts (no automatic generation) and contains at least the following information:

• Introduction: A brief description of the test object and the aim of the pentest.
   
• Management/Executive summary: A summary of the results.
   
• Risk assessment: Assignment of a degree of risk to each vulnerability (Informative, Low, Medium, High or Critical Risk), with which the criticality of the respective vulnerability is described.
   
• Clear representation: Clear representation of all identified vulnerabilities in a table.
   
• Detailed description of vulnerabilities & Proof-of-Concept: For each vulnerability there is an individual description that reflects precisely how the vulnerability was found and how it can be exploited by an attacker (proof-of-concept).
   
• Evaluation of automated tests: The results of the automated tests are evaluated by the TÜViT experts, checked for false/positive results and then summarized in the report.
   
• Recommend measures to remedy the vulnerability: For each vulnerability, there is a recommended measure to eliminate the vulnerability.
   
• References: If available, we provide references to vulnerability databases (e.g., CVE).
   
• Technical Appendices: If available, further information and files on the tests performed are provided as an Appendix, e.g. the raw results of the port and vulnerability scans.