Cirro
Operational Technology (OT) Cyber Security
As the worlds of IT and OT merge, OT assets are at greater risk than ever of cyber security attacks. Cirro and Industrial Defender offer a strategic consultancy service to indentify risks, mitigate impact and protect critical assets.
Features
- Protection for operational assets (OT)
- Identify vulnerabilities and risks in OT estate
- Communicate to Senior Executives and Management
- Develop protection strategy for operational continuity
- Dedicated OT cyber Security experts
- Operational Technology (OT) asset identification and vulnerability identification
- Identify OT assets, known vulnerabilities and potential risk
- Risk mitigation and long-term OT security risk reduction
- Identifies appropriate security measures, standards and tools
Benefits
- Bring OT cyber security inline with IT cyber security
- Gain insight on OT cyber security real world risk
- Significantly reduce OT cyber risks & exposure
- Holistically manage OT cyber risks in operational technology environments.
- Reduce cost of managing OT security
- Reduce OT critical threats on networked and non-network devices
- Ensures the uninterrupted operation of critical infrastructure and industrial processes
- Reduce risk on critical infrastructure and critical assets
- Ensure compliance and governance to standards
Pricing
£550 to £1,550 a unit a day
- Education pricing available
Service documents
Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format,
email the supplier at michaelo@cirro-solutions.co.uk.
Tell them what format you need. It will help if you say what assistive technology you use.
Framework
G-Cloud 14
Service ID
1 9 5 9 6 1 4 3 5 0 9 0 9 6 6
Contact
Cirro
Michael Owen
Telephone: 020 3418 0412
Email: michaelo@cirro-solutions.co.uk
Planning
- Planning service
- Yes
- How the planning service works
-
When protecting Operational Technology from cyber threats, it's important to take a holistic approach that considers the entire OT infrastructure. This is where Industrial Defender and Cirro's professional services come in, offering consulting, design, project planning, implementation, monitoring, maintenance, and training. OT cyber security projects can be phased across different locations, departments, operation units, or cost centres, or they can be deployed across the entire infrastructure.
These two approaches can either be preventative, aiming to prevent an OT cyber event, or reactive, responding to an OT cyber event. The goal of the planning sessions is to gather as much detail as possible to design the right OT cyber defense. This includes identifying known assets, networks, existing tools and integrations, and reviewing any risk areas or concerns. Additionally, we use a network sniffer to discover any unknown devices and plan to monitor non-network devices as well. The aim of this planning is to have a holistic understanding of the risk profile and desired outcomes, helping to maintain cyber defences over time. - Planning service works with specific services
- No
Training
- Training service provided
- No
Setup and migration
- Setup or migration service available
- No
Quality assurance and performance testing
- Quality assurance and performance testing service
- Yes
- How the quality assurance and performance testing works
- Industrial Defender and Cirro offers a wide range of services such as commissioning, support, training, engineering, analysis, advising and technical consulting to help you get the most out of your deployment. Working closely with customers to understand their specific needs and apply the appropriate solutions. We focus on system hardening and threat prevention using the Industrial Defender platform. Additionally, we optimise platform deployment for each customer's environment to achieve the lowest Total Cost of Ownership (TCO). This process is achieved through continual testing, monitoring and Quality Assurance.
Security testing
- Security services
- Yes
- Security services type
-
- Security strategy
- Security risk management
- Security design
- Cyber security consultancy
- Security testing
- Security incident management
- Security audit services
- Other
- Other security services
-
- OT Cyber Security
- Industrial Security
- OT Strategy and Posture
- Certified security testers
- Yes
- Security testing certifications
- Other
- Other security testing certifications
-
- NERC CIP (North American Electric Reliability Corporation Critical Infrastructure Protection)
- UK NCSC CAF
- Cybersecurity Capability Maturity Model (C2M2) - Department of Energy
- CIS - Critical Security Controls
- ISA99/IEC 62443 - Cybersecurity for operational technology
- NEI - Compliance for Nuclear Power Operators
- NIST Cybersecurity Framework
- NIS - EU Security of Networks and Information Systems
Ongoing support
- Ongoing support service
- No
Service scope
- Service constraints
- This service is a strategy and advice service there are therefore no constraints.
User support
- Email or online ticketing support
- No
- Phone support
- Yes
- Phone support availability
- 9 to 5 (UK time), 7 days a week
- Web chat support
- No
- Support levels
- This is an advisory service and not an operational support service. However we do offer ongoing advice and guidance.
Resellers
- Supplier type
- Reseller providing extra support
- Organisation whose services are being resold
- Industrial Defender
Staff security
- Staff security clearance
- Other security clearance
- Government security clearance
- Up to Developed Vetting (DV)
Standards and certifications
- ISO/IEC 27001 certification
- Yes
- Who accredited the ISO/IEC 27001
- IQS
- ISO/IEC 27001 accreditation date
- 17/7/2-23
- What the ISO/IEC 27001 doesn’t cover
- 3rd Party Services
- ISO 28000:2007 certification
- No
- CSA STAR certification
- No
- PCI certification
- No
- Cyber essentials
- Yes
- Cyber essentials plus
- No
- Other security certifications
- Yes
- Any other security certifications
-
- ISO 22301 - Business Continuity
- ISO 9001 - Quality
Social Value
- Social Value
-
Social Value
- Fighting climate change
- Equal opportunity
- Wellbeing
Fighting climate change
Commitment to Reduce Carbon Footprint and Climate-Related Initiatives In alignment with our commitment to reducing our ecological impact, we are dedicated to collaborating with our customers and suppliers to contribute to environmentally sustainable initiatives that improve ecosystems and reduce ecological impact. Our primary objective is to minimise the environmental impact of our operations. Focus on Environmental Impact Reduction Our main focus is to engage in discussions with our customers to explore collaborative approaches for reducing the environmental impact, particularly by minimising non-essential travel, to reduce energy usage and wastage of time and materials, all of which have an impact on operational consumption. As we transition back to regular operations, we are focused on reducing our physical impact, including initiatives such as flexible working, minimising printing, and enhancing recycling efforts. We are committed to optimising our physical office requirements to ensure efficient resource utilisation. Future-Focused Solutions and Efficiency We are dedicated to designing future-oriented solutions that embed efficiency into our design and delivery processes. Leveraging the momentum generated by the pandemic, we aim to build on successful new working methods. At Cirro, we are continually looking to identify potential improvements in the way we work to improve our operational efficiencies which directly impact energy usage, travel or ecological impact. By championing these initiatives, we are steadfast in our commitment to not only reduce our own ecological impact but also to actively engage with our stakeholders to foster environmental sustainability and support initiatives that have a positive impact on our world.Equal opportunity
Delivering Social Value Theme 4 and PPN 06/20 Model Award Criteria In the following section, we elaborate on our approach to fulfilling Social Value Theme 4 and the relevant PPN 06/20 Model Award Criteria Our strategy, aligned with WSP’s 2022-24 Inclusion & Diversity Strategy, encompasses the following initiatives: Skill Development for Underrepresented Groups We are committed to supporting the development of new skills that lead to recognised qualifications for underrepresented groups. Addressing Inequality in Employment, Skills, and Pay We will demonstrate a clear commitment to identifying and addressing inequality in employment, skills, and pay within the contract workforce. This includes implementing time-bound action plans to monitor the inclusion and progression of full-time equivalent (FTE) employees from underrepresented groups. Supporting In-Work Progression Our approach includes support for in-work progression, aiming to assist individuals from disadvantaged or minority groups in transitioning into higher-paid roles by developing new skills relevant to the contract. Real-World Equal Opportunity When recruiting, Cirro has a policy to ensure that all names, ages, race or gender details are removed from CVs, so we focus on interviewing and employing the most suitable person for the role.Wellbeing
Wellbeing Initiatives In our commitment to prioritising the well-being of our teams, we are dedicated to supporting the health and well-being of our employees, contractors, suppliers and customers. Flexible Working Support We offer flexible working conditions to our staff. They have a clearly defined job description, they know what needs to be done and they have the flexibility they need to be able to do that whilst balancing home life, physical and mental health. Internal Support Cirro’s works typically in virtual teams, it’s important that we have ‘virtual’ tea breaks and have regular discussions. Cirro also keeps an eye on the level of output expectations and workloads of employees to ensure the right resourcing levels and workloads. During periods of high-intensity working, such as working on tenders, delivering projects or whatever it might be, Cirro ensure employees take time out once this is more practically possible to ensure employees can refresh and relax.
Pricing
- Price
- £550 to £1,550 a unit a day
- Discount for educational organisations
- Yes
Service documents
Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format,
email the supplier at michaelo@cirro-solutions.co.uk.
Tell them what format you need. It will help if you say what assistive technology you use.