EKS / OT
IndustrialControlSystemsSecurity
In an energy facility a cyber incident means physical outage, not just data loss. Turkey's Energy Market Regulatory Authority (EPDK) sets binding security requirements for industrial control systems in the sector. We analyse your OT networks without disrupting production, bring them into compliance and prepare you for audits.
What we do
- 01
OT asset inventory
PLCs, RTUs, SCADA and HMI components and network architecture are mapped using passive methods.
- 02
Risk analysis
Cyber risks are assessed with process safety and business continuity in mind.
- 03
Security analysis and testing
Security tests are planned and carried out according to the regulatory procedures.
- 04
Network segmentation
Traffic between IT and OT is split into zones and made auditable.
- 05
Audit readiness
Policies, procedures and evidence are prepared, with support throughout the audit.
Regulations and standards we follow
- Regulation on Information Security in Energy-Sector ICS (Official Gazette 30123)
- ICS Security Analysis and Testing Procedures (Board Decision 8560)
- ISO/IEC 27001 Information Security Management
- ISO/IEC 27019 Information Security for the Energy Utility Industry
- DTO Information and Communication Security Guide
More services
Let's review your infrastructure together.
A short call is all it takes to assess where you stand and map out a plan tailored to you.