Security engineering for operational technology, from the first drawing to decades of operation. Every engagement is scoped to the facility's country, sector and type, its supply chain, and the pressures acting on it from outside.
What we do
Each service applies IEC 62443, the international series for the security of industrial automation and control systems, at a different moment in the life of a facility or a product.
What is really running, before you sign.
Security specified with the design, not added after commissioning.
Upgrading a running plant without stopping it, and without leaving it exposed while the work is under way.
The whole series applied as one programme, from the asset owner's policies to the components on the floor.
One accountable engineer on the owner's side, across designers, integrators and contractors.
A cyber-physical model of the facility, kept current with its own telemetry and with the law that applies to it.
For manufacturers of industrial and OT products sold into the EU: the most likely route to conformity with the Cyber Resilience Act, and the work to get there.
Scoping
The same control system faces different obligations and different threats in Rotterdam and in Riyadh. These five facts set the scope, the applicable law and the evidence the work has to produce.
The country sets the law: cybersecurity and critical infrastructure statutes, incident reporting deadlines, and the authorities the operator answers to.
Energy, water, transport and the other regulated sectors carry sector rules on top of national law.
A substation, a port terminal and a datacenter have different control systems, safety cases and failure modes.
Who built and maintains the systems, where the components come from, and who depends on what the facility produces.
Threat activity against the sector, geopolitical exposure, grid and climate stress, and disruption in the supply chain.
Choose a country, sector and facility type to see the regulatory baseline an engagement starts from. Every item links to its source.
Choose a country or territory to see its regulatory baseline.
Selected engagements
The engagements behind these services, as listed on the About page.
Enquire
The scope you chose above is attached to the message. Enquiries go to jim@eigenia.nl.
Eigenia does not set cookies. The only thing stored in your browser is one preference, saved in local storage, noting that you have seen this notice.
