EC2i – Industrial Cybersecurity Collaborative Assessment

It is very common that one of the first interventions required by an organization concerned with improving OT security levels is to carry out an assessment of its current level of maturity with respect to the cybersecurity of its industrial environments and/or critical infrastructures. To do this, there are different reference frameworks, best practices, regulations and/or standards that help to perform this analysis.

From ICLK, we want to propose a preliminary step. We invite you to use our EC2i [Industrial Cybersecurity Collaborative Assessment] tool to carry out a collaborative self-assessment of the level of maturity regarding the OT cybersecurity of your organization.

The tool has been designed pursuing the following objectives:

• To easily and quickly facilitate a first snapshot of the degree of maturity that an organization has with respect to industrial cybersecurity.
• To analyze a series of domains (some specific to the OT field, others more generic) that should be worked on to increase the security of industrial environments.

To serve as a document for analysis and constructive discussion between different people in the organization (IT, OT, systems, processes, engineering) to design an OT cybersecurity roadmap in the future.

On the other hand, the EC2i tool is aimed at those people:

• Who are unaware or have not yet become aware of the importance of increasing the security of operating environments.
• More familiar with IT systems, who need to know the scope of industrial cybersecurity.
• More familiar with OT systems, who seek to understand in which domains or areas it is most necessary to focus efforts and resources, with the aim of minimizing the probability of security incidents occurring.

In the following video, we show you the scope and operation of the EC2i tool.

As you may have seen in the video, EC2i is a tool that helps you take a first step to know the level of maturity of your organization with respect to industrial cybersecurity.

Our proposal is that once you have completed it, we can help you interpret the results obtained. To do this, we propose carrying out a 4-hour session at your facilities in which we will cover the stages of:

• Contextualization: We will carry out a visit to your facilities to understand your processes and identify the main ICS/OT systems.
• Training: We will provide basic 2-hour training so that you learn how to carry out OT Cybersecurity Programs.
• Qualification: We will hold a meeting in which we can prioritize possible actions and initiatives to increase the security of the OT environment.
• Planning: At the end of the session, we will provide you with an “OT Cybersecurity Roadmap”.

If you are interested in using the EC2i and having us help you design a first “OT Cybersecurity Roadmap”, do not hesitate to contact us and we will find a day to meet.

Get in touch with us through this form or call us at 902 10 32 83 and request more information about the EC2i.