What we know,written down.
Guides to the standards, the regulations and the work, written for asset owners, engineers and boards. What each one asks, what an assessor looks for, and where to start.
7 minute readThe SOCI Act and CIRMP: what they ask of your operational technology
Australia's critical infrastructure law, read from the control room.
Energy and renewables · Water · Marine ports · Rail · Oil and gas
8 minute readIEC 62443 explained for asset owners
Zones, conduits and security levels, and what an assessment against the series actually produces.
Energy and renewables · Oil and gas · Water · Manufacturing · Chemical
6 minute readYou cannot secure what you cannot see: building an OT asset inventory
Why the inventory comes first, how to build one without touching the process, and what it has to hold.
Energy and renewables · Mining · Water · Manufacturing
6 minute readAESCSF explained: security profiles, maturity levels and what an assessment involves
The Australian energy sector's own framework, and how to get through an SP-1 or SP-2 assessment without surprises.
Energy and renewables · Oil and gas
6 minute readHow a threat assessment uses MITRE ATT&CK for ICS
Starting from the adversary instead of the checklist, and what that changes about your priorities.
Energy and renewables · Oil and gas · Mining · Water
7 minute readIncident response for OT: why the IT playbook fails on the plant floor
Safety first, isolation is not free, evidence lives in controllers, and the clock starts before you are ready.
Energy and renewables · Water · Manufacturing · Oil and gas · Rail
8 minute readIndia's CEA cyber security regulations 2026: what power sector OT has to do by April 2027
The first binding cyber regulation for India's power sector, read for the plant.
Energy and renewables
6 minute readThe Purdue model and OT network segmentation, without the religion
What the levels mean, where the boundary really is, and how to segment a plant that was never designed for it.
Energy and renewables · Oil and gas · Manufacturing · Chemical · Water
7 minute readPenetration testing in OT: how to test a plant without breaking it
Why IT methods hurt control systems, the rules of engagement that matter, and what a good OT test report contains.
Energy and renewables · Oil and gas · Water · Mining · Manufacturing
Want one of these applied to your plant?
Tell us the site, the systems and the regulator. A consultant will reply.