Our CADR methodology and process leverages the framework of your choice to evaluate your O&G OT architecture, configurations, policies, security controls and interconnectivity to internal/external systems. When considering a cybersecurity maturity benchmark, we recommend using a Crawl, Walk, Run approach.
Our process begins with the acquisition of architecture drawings and diagrams, asset inventory lists/spreadsheets, network configurations (VLANs, routing, ACLs), firewall configurations, remote access, site-to-site VPNs, OT security policies and procedures and OT monitoring tool data/configuration.
From there we will conduct network and system design documentation reviews, interview key staff members across IT, OT, Security and Leadership to gain valuable insights into your organization's operational and security practices, align our findings with best practices to determine potential areas for improvement and ultimately provide the CADR Report and briefing, which highlights areas of strength and opportunities to enhance your OT security program.
