// IT/OT network consulting for industry
An independent senior review of your OT network and the IT/OT boundary, for industrial operations with up to around 500 users. Three fixed-scope offers, clear deliverables and a plan your team or integrator can actually execute.
// 01 · NIS2
The NIS2 directive extends cybersecurity obligations to many industrial sectors and puts the responsibility on management. For anyone running OT, the practical question is simple: can you show what is on the network, how it is separated and who has access to it?
Inventory, segmentation and control of remote access are the most direct starting point for verifiable progress.
// 02 · Services
For companies that need an independent senior view without committing to a long transformation project. Each offer can be run on its own or in sequence.
inventory · Purdue model · risks
An accurate picture of the industrial network as it stands, with risks ranked by operational impact.
output > current-state diagram + risk register
zones and conduits · ZTNA · IEC 62443
Zone and conduit design, and vendor remote access without open ports or shared VPNs.
output > target architecture + migration plan
baseline · detection · logging
Know what is happening on the OT network, with alerts your team can actually act on.
output > visibility design + runbooks
// 03 · Deliverables
Documents to decide with and to execute from: a report management can read in ten minutes and diagrams the technical team can use the next day. Illustrative examples with fictitious data.
Executive summary, technical findings with evidence, risk register and a backlog split into quick wins, medium-term and structural actions.
Zones, conduits and target security levels, with every permitted flow documented. Delivered in an editable format.
// 04 · Process
Designed to fit alongside existing internal teams, integrators or MSPs, without duplicating work or creating artificial dependency.
01
A short conversation about sites, stack, stakeholders and goals. A proposal with fixed scope and timeline.
02
Documentation, remote sessions, a site visit and configuration review, always read-only.
03
Risks organised by severity, operational impact and mitigation priority.
04
Report, diagrams, debrief and a backlog for your internal team or partner to implement.
Confidentiality. Data and configurations are handled only for the agreed purpose, under NDA when needed. No standing access remains once the work is done.
// 05 · Contact
Tell us the context: number of sites, environments and what you want clarified. You leave with a first technical read and a clear next step, even if it is not with us.
Email requests are answered without scheduling priority. We work in Portuguese and English.
In the Cal.com calendar, from the available slots.
Sector, size, problem and timeline. It takes under two minutes.
MB WAY, Multibanco or card. The slot is confirmed with payment.
We arrive prepared, based on your answers. The certified invoice follows by email.