Phi Tech Solutions

Engineering for process plants since 2005

phitech.com.pk (opens in a new tab)

Process engineering, process control and OT security, in one company.

Phi Tech Solutions has worked in process plants since 2005. PhiSecure is its OT cybersecurity practice, working alongside the company's process engineering, process control and reliability teams.

Visit phitech.com.pk (opens in a new tab)
An operator panel with gauges, indicator lamps and a control terminal in a plant

Assess

SCADA and DCS Health Check

We review your control network, the equipment connected to it and the computers that run it. The review is not measured against a standard, and there is no commitment beyond the visit.

Talk to us about a health checkAll seven services

Our approach

  1. Stage 01AssessMeasure your exposure
  2. Stage 02DesignPlan the architecture
  3. Stage 03DeployInstall the technology
  4. Stage 04SustainMaintain security
01

Overview

What the service covers and why it matters

The review covers the control network and everything connected to it. At the end, you know where you stand and have a sound basis for a security budget.

There is no standard to meet and nothing to prepare in advance. It is the lowest-cost way to find out which of our other services, if any, you need.

At a glance

Stage
Assess, stage 1 of 4
Sectors
All

What we look at

  • What is connected to the control network, compared with what the drawings show
  • Which devices can reach the internet, and by which route
  • Who has physical access to cabinets, and whether that access is recorded
  • What vendors can do when they connect remotely
  • Which computers run software that is no longer supported
  • What is backed up, and whether a restore has ever been tested

Why it matters

Most plants have a network drawing, but few have one that is up to date. Each project tends to leave behind equipment that was never recorded, such as an extra switch, a laptop that stayed connected or a modem installed by a vendor.

Equipment that is not on the drawing is not managed, and that is where much of the risk lies.

If you need to set a security budget and have no current information to base it on, this review provides that information.

02

Scope

What this service does not include

  • Not an audit.Nothing is graded and nothing is reported to anyone else. The findings belong to you.
  • Not a penetration test.We do not attack any system, and we do not run scans that could disturb a controller.
  • Not a sales visit.The findings are yours to use whether or not you buy anything from us afterwards.
  • No shutdown.We do not change or interrupt any running system during this work.
03

How it works

The steps and what you receive

  1. A walk through the plant with the people who know it best
  2. The network mapped as it is today
  3. Every connected device listed, including any that were not expected
  4. Findings ranked by potential impact
  5. A briefing in plain language for the people who make decisions

What you receive

  • Findings listRanked by potential impact, with what it would take to address each finding.
  • Current network diagramThe network as it is today, which often differs from the existing drawings.
  • BriefingA summary of the findings for the people who approve the budget.
04

Who it is for

When this service is the right choice

  • You run a control system and have no current view of its security
  • You need to set a budget and have nothing to base it on
  • An insurer, customer or vendor has started asking about your OT security
  • There has been an incident and you are not sure how far it reached

Related services