This assessment is specifically designed to meet the needs of organizations concerned about the operational risk associated with aggressive probing, scanning, software agents, or other more aggressive security evaluation techniques. The LMNTRIX ICS Security Assessment combines a remote workshop-based ICS architecture review with detailed technical analysis of firewall configurations and active production ICS network traffic.
The LMNTRIX ICS specialists speak the language of Operational Technology (OT) and work directly with the engineers responsible for OT to adapt cyber security best practices appropriately for the ICS environment. We also work with IT security leaders to equip them with the domain knowledge and credibility required to engage their OT teams in effective cyber security discussions.
- Network segmentation review
- Security device configuration review
- Threat detection by tapping into the production ICS network
- Vulnerability assessment
- Final Report & Presentation
- Asset visibility: All devices on OT networks, including serial networks, as well as extensive attributes about each device
- Network Visibility: All OT network sessions and their bandwidth, actions taken, changes made, and other relevant details
- Process visibility: All OT operations and the code section and tag values of all processes related to OT assets
- Review of the existing architecture diagrams, dataflows and designs
- Inventory and evaluation of OT protocols that are in use
- Review any existing security standards for hardware and software deployment
- Cross-zone violations
- Unintended connectivity from the ICS to the Internet or business network
- Dual-homed devices
- ICS protocols traversing the ICS firewall
- Anomalous computer-to-computer connections
- Customers without existing physical or logical segmentation can use Virtual Zones as a cost-effective alternative
- Customers seeking to implement physical or logical segmentation can accelerate such initiatives by using Virtual Zones as the blueprint
- Anomaly Detection, which identifies changes in communication patterns
- Security Behaviors, which identifies adversary techniques used in attacks against IT and OT networks
- Known Threats, which identifies IoCs
- Operational Behaviors, which identifies OT operations such as firmware upgrades
- Custom Rules, which identifies user-defined events
- Full-Match Vulnerabilities: The complete OT visibility provided by LMNTRIX facilitates easy and accurate identification of full-match vulnerabilities
- Attack Vector Mapping: This assessment identifies and analyzes all vulnerabilities and risks in an OT environment to calculate the most likely scenarios in which an attacker could compromise the environment
- Risk-Based Prioritization: All vulnerabilities are scored based on the unique risk they pose, enabling more efficient and effective prioritization
- Non-invasive assessment to reduce operational risks
- Identify and inventory all OT assets
- Identify and mitigate complex security vulnerabilities before an attacker exploits them
- Analyze real-time threats and suspicious activity
- Review network segmentations and propose any recommendations
- Actionable recommendations based on the risks and concerns specific to your industrial proces
- ICS Assessment Report
- Presentation of our findings to the technical and executive stakeholders
US +1.888.958.4555
AU +61.288.805.198
UK +44.808.164.9442
SG +65.3129.2639
HK +852.580.885.33