SCADA and Control Systems Cyber Security
As a leader in SCADA and Control Systems cyber security, Lofty Perch can create and deliver effective cyber security solutions to industrial organizations, and help protect key assets from cyber attack and security incidents. Lofty Perch is a recognized leader in the SCADA security domain, and works with key organizations such as the Idaho National Laboratory (INL) and the DHS Control Systems Security Program, doing cyber security assessments, training, and developing recommended practices to industry.
With a suite of proven Services dedicated to process control and SCADA cyber security, organizations have come to trust Lofty Perch in their extensive capabilities that focus on security assessments, compliance guidance, and the creation of effective defense-in-depth strategies.
CONTROL SYSTEMS CYBER SECURITY SERVICES
Lofty Perch has extensive experience in providing cyber security solutions to industrial domains, and can tailor as specific solution set to accommodate any demand. As an example of key programs Lofty is engaged in, Lofty Perch works with the DHS Control System Security Program doing cyber security assessments, training, and developing recommended practices to industry.
With a proven capability of designing and executing SCADA and process control security assessment programs, Lofty Perch services are tuned to architectures that include HMI/SCADA, RTU, PLC, IED, and various Utility Management Systems (UMS). In addition to sector-specific research in emerging risk-related domains for SCADA and industrial control architectures, the Lofty Perch technical security expertise is comprehensive in many areas, including:
- Functional security evaluations of mission critical environments to support sector guideline (NERC etc.)
- Applicable assessment experience augmented with dedicated analysis of process control security solutions from AGA-12, CIDX, SP-99, and the TC57 WG30
- Network infrastructure assessment programs with client requirements including actionable mitigation plans and effective recommendations
- Robust experience with security guidance and standards including ISO 17799, NERC CIP, CoBIT, NSA IAM, and many other utility-centric frameworks
- Expert knowledge in porting both open source and commercial security technologies into control environments
- Control system cyber security training
- Control System cyber forensics and contingency planning
