Operational Technology Security
tmc3’s Operational Technology (OT) Security Service provides robust protection for industrial control systems and Operational Technology within critical infrastructure. Focusing on resilience and reliability, we help safeguard OT environments against cyber threats, ensuring operational continuity and safety. tmc3 works to ensure Operational Technology security is considered as an enabling function.
Features
- Risk assessment and threat modeling
- Formal assessments to support regulatory requirements including NIS Regulations
- Network segmentation and access controls strategies
- Real-time monitoring of OT assets
- IT/OT convergence security support to help optimise technology estate
- Secure remote access solutions
- NCSC CAF and NIST alignment
- Incident response planning for OT incidents
- Security Architecture review and developing reference models for change
- Training programmes for OT staff on security best practices
Benefits
- Enhanced resilience against cyber-attacks on critical infrastructure
- Reduced downtime and operational disruptions
- IT/OT convergence support helps optimise technology estate
- Protection of sensitive OT data and intellectual property
- Compliance with industry regulations and standards
- Improved safety for personnel and assets
- Cost-effective solutions tailored to OT environments
- Access to specialised expertise in OT security
- Early detection and mitigation of cyber threats
- Scalable solutions adaptable to evolving OT landscapes
Pricing
£425 to £1,480 a unit a day
- Education pricing available
Service documents
Request an accessible format
Framework
G-Cloud 14
Service ID
3 6 9 1 7 5 2 7 8 5 6 8 0 1 9
Contact
tmc3 Limited
Nathan Tittensor
Telephone: 0113 8730449
Email: Frameworks@tmc3.co.uk
Planning
- Planning service
- Yes
- How the planning service works
-
Tmc3 Cyber Security Consultancy services are designed to help organisations in all aspects of Cyber Security and develop their maturity, irrespective of where they are in the journey, from assessing, planning to designing, implementing and supporting operationally. We offer a number of services designed to help buyers to plan, implement and manage security and protect data within cloud hosting or software services.
Each engagement is treated as a bespoke requirement to ensure planning for onboarding, through life management and offboarding works for our customers unique requirements. Please see our service description for more information and/or get in touch at the contact details provided. - Planning service works with specific services
- No
Training
- Training service provided
- Yes
- How the training service works
-
Tmc3 cyber security training is bespoke to each service and each buyer. Our team work dynamically with your team to ensure their expertise is shared through workshops, one-to-one sessions, meetings and presentations. Where required they will create learning collateral to be shared amongst those within your delivery team.
Training will be provided by the specialists we deploy to your programme and will be overseen by a dedicated Service Specialist. Our aim is to provide you with the specialist support you need to integrate cloud solutions into your business while facilitating a sustainable service to manage your cloud in the long term. - Training is tied to specific services
- No
Setup and migration
- Setup or migration service available
- Yes
- How the setup or migration service works
-
Tmc3 cyber security consultancy helps to minimise the threat footprint of an organisations digital landscape.
We offer a range of support services designed to help support buyers with the secure set-up or management of their transition to the Cloud or between Cloud Services.
We provide comprehensive services for the set-up and migration of cloud applications and platforms. In addition to this, we provide a full roadmap to support the transition from legacy systems to cloud hosting or cloud software.
We understand the need to migrate with minimal disruption and provide where possible fully operational services. We therefore reduce the risk of outage and data loss through structured planning, test and execution methodology.
Spending the time to support and embed user adoption during the early phase, ensures greater long-term user adoption for new ways of working. We therefore ensure that organisational culture is structured to allow for successful outcomes. New ways of working can take time to embed into a team or practice, therefore our lessons from previous programmes of work can be shared, combined with our transformational change experience to deliver successful outcomes.
Please see our service description for more information and/or get in touch at the contact details provided. - Setup or migration service is for specific cloud services
- No
Quality assurance and performance testing
- Quality assurance and performance testing service
- Yes
- How the quality assurance and performance testing works
-
Tmc3 performs rigorous quality assurance and performance testing during our implementation and planning phases, prior to the go live date.
Our internal Total Quality Management System defines the control system and quality procedures used, ensuring we provide excellent quality of service.
Our comprehensive quality assurance is offered through the lifecycle of product development, providing our clients with robust and scalable solutions to meet their requirements.
Specific requirements are agreed for each engagement. A dedicated named specialist is assigned as a single point of contact for each engagement.
Security testing
- Security services
- Yes
- Security services type
-
- Security strategy
- Security risk management
- Security design
- Cyber security consultancy
- Security testing
- Security incident management
- Security audit services
- Certified security testers
- Yes
- Security testing certifications
-
- GBEST
- CHECK
- CREST
- Tigerscheme
Ongoing support
- Ongoing support service
- Yes
- Types of service supported
-
- Buyer hosting or software
- Hosting or software provided by your organisation
- Hosting or software provided by a third-party organisation
- How the support service works
- Tmc3 provide an ongoing cyber security support service to meet your requirements based on the demands of your programme and the service you need. Specific support levels are agreed for each engagement. A dedicated named specialist is assigned as a single point of contact for each engagement.
Service scope
- Service constraints
- No known constraints.
User support
- Email or online ticketing support
- Email or online ticketing
- Support response times
- We will respond immediately to any commercial or service questions. Normal support hours are Mon-Fri 9-5. Out of hours support can be agreed on a engagement by engagement basis.
- User can manage status and priority of support tickets
- No
- Phone support
- Yes
- Phone support availability
- 9 to 5 (UK time), Monday to Friday
- Web chat support
- No
- Support levels
- We will respond immediately to any commercial or service questions. Normal support hours are Mon-Fri 9-5. Out of hours support can be agreed on a engagement by engagement basis.
Resellers
- Supplier type
- Not a reseller
Staff security
- Staff security clearance
- Conforms to BS7858:2019
- Government security clearance
- Up to Developed Vetting (DV)
Standards and certifications
- ISO/IEC 27001 certification
- Yes
- Who accredited the ISO/IEC 27001
- NQA Certification Limited
- ISO/IEC 27001 accreditation date
- 16 January 2023
- What the ISO/IEC 27001 doesn’t cover
- N/A – This certification covers the entire business and in particular the delivery Cyber Security & Data Protection Professional Services.
- ISO 28000:2007 certification
- No
- CSA STAR certification
- No
- PCI certification
- No
- Cyber essentials
- Yes
- Cyber essentials plus
- Yes
- Other security certifications
- No
Social Value
- Social Value
-
Social Value
- Fighting climate change
- Tackling economic inequality
- Equal opportunity
- Wellbeing
Fighting climate change
In 2024, tmc3 has achieved Net Zero emissions.
tmc3 has implemented a documented Environmental Management System to reduce our environmental impacts. We will continue to focus on further reductions and our sights remain firmly set on exceeding all elements of our Science-Based Target on a long-term basis.
Actions we take include, but are not limited to: establishing environmentally sensitive purchasing policies (buying recycled or long-life products; favouring products derived from natural/sustainable sources) and monitoring the environmental performance of our suppliers; ensuring that all decisions regarding working practices and purchasing take environmental considerations into account. We measure, monitor and minimise our usage of resources and consumables, and our greenhouse gas emissions. We actively look for ways to reduce waste and recycling, and encourage the use of sustainable modes of transport. We encourage home working and the use of virtual collaboration tools.
tmc3's Carbon Reduction Plan has been completed in accordance with PPN 06/21 and associated guidance and reporting standard for Carbon Reduction Plans. This is available on the tmc3 website.
For the provision of these services, we commit to offsetting the carbon footprint for the development of the tmc3 deliverables and, if requested, will provide certification verifying this action has been completed within a month of project completion. We will measure the ‘As-is’ state of the contract to give us an accurate benchmark to work from, and how we need to progress throughout the contract lifecycle. This will include measuring against Scope 1,2&3 emissions, for example: Water use, electricity use, conducting a materiality checklist, measuring business travel, working from Home, business travel accommodation, employee commuting etc. We will gather data across all scope of emissions and utilise carbon calculator tooling to give an accurate and transparent measurement. We will then present these findings back to you and key stakeholders.Tackling economic inequality
Social responsibility and supporting our communities are hugely important aspects of who we are. We love to spend time and energy helping local charities and developing the security professionals of tomorrow, through organising meetups and mentorship initiatives. Cyber Choices, Hullo and Hull4Heroes are just a few charities and initiatives we support. For us, this is much more than a set of words, this is about the positive impact we have on society, the environment and the economy.
tmc3 are pleased to confirm that all of our staff and associates are paid above the real living wage, in addition to receiving a pay review following every performance review. Furthermore, we hold formal accreditation from the Living Wage Foundation as a living wage employer. In our supply chain of associates, we prefer to work with known and trusted associates with well-established subcontracts and working practices. We do not use zero hour contracts.
We are committed to creating job opportunities, particularly for those who face barriers to employment or are located in deprived areas. Our hiring practices are inclusive, and we provide comprehensive training to our employees to equip them with the necessary skills for their roles. Additionally, we offer apprenticeships and internships to individuals from diverse backgrounds, providing them with practical experience and a pathway to employment in the technology industry.
Each year tmc3 supports a number of young people to obtain an apprenticeship in Cyber Security through the tmc3 Academy.
To monitor and measure our efforts in tackling economic inequality, we will use Key Performance Indicators such as:
1. Number of new businesses supported: This will measure our impact on entrepreneurship.
2. Number of job opportunities created: This will assess our contribution to employment.
3. Number of individuals trained and qualifications achieved: This will evaluate our efforts in supporting educational attainment.Equal opportunity
tmc3 is committed to ensuring fair treatment of all stakeholders in our business from customers to employees. We believe in equality of opportunity and inclusion, where tmc3’s Equality, Diversity and Inclusion policy goes beyond what we are required to do to ensure all contributions are valued and respected. We ensure that in all our activities we promote equality and provide respect to all, irrespective of marital or civil partnership status; having or not having dependants; religion or beliefs; race (including colour, nationality, ethnic or national origin); disability; sex or sexual orientation; age; or pregnancy and maternity. This policy extends beyond our own employees to client personnel, subcontractors, suppliers and potential recruits, and underpins our approach to recruitment of staff and engagement with our supplier base.
Our tailored onboarding programs acclimate new employees with disabilities to the workplace culture and educate them on relevant policies and procedures but also include disability-specific information such as physical alterations, flexible hours, staff training and more ergonomic equipment and software.
The tmc3 Academy is a development programme designed to cultivate emerging talent in the field of security. The Academy is tailored to guide individuals into becoming security specialists. It provides a dynamic mix of practical experiences and formal coaching, all underpinned by three pillars: competence, knowledge, and transferable skills.
The tmc3 Academy aims to empower individuals within a span of 16 months, providing them with hands-on experience, dedicated study sessions, and individualised coaching. This approach facilitates their transition into confident members of both the client-facing and internal teams at tmc3. The Academy prides itself on its inclusivity, welcoming individuals from diverse academic backgrounds and placing an emphasis on transferable skills and motivation rather than prior exposure to cyber security.Wellbeing
tmc3 is a company that is committed to supporting the health and wellbeing of our staff, both physically and mentally. We make every effort to ensure that our people are physically comfortable working at home by providing office equipment, and whatever else is needed (subject to individual accessibility requirements).
We provide an Employee Assistance Programme for all staff including access to an online platform and 24hr confidential helpline. This provides counselling support and a virtual library of wellbeing information, ensuring all staff have practical support for all aspects of physical and mental wellbeing. Our team physically get together every 6-8 weeks, to participate in social and team building activities. We have employed a Mental Health First Aider, who provides advice and support, to our personnel and associates.
We have created a safe space for all employees to ask for help. This can be done confidentially, or anonymously, through our ‘Better Ways of Working’ form, which is reviewed by the Executive Committee. We capture decisions made, within the ExCo Minutes. Recent examples of action taken:
o Introduced the Electric Vehicle Scheme
o Introduced an Employee Rewards and Recognition Scheme
o Private Medical Healthcare Plans
We conduct regular mental health and well-being workshops for staff and stakeholders, drawing on our experience of coaching and mentoring experience with Hullo Charity. We have encouraged all tmc3 personnel to provide a minimum of one day (paid) per annum, to charity volunteering. We also factor in team charity days, such as planting trees for the UK National Forestry Commission.
We routinely monitor employee MHW by undertaking: Engagement surveys to analyse UK employee MHW issues and monitor progress, and, Account “Pulse check” surveys to understand how people are feeling and whether immediate intervention is required.
Pricing
- Price
- £425 to £1,480 a unit a day
- Discount for educational organisations
- Yes