Talk to us

OT security

Security runs through every layer.

We assess and protect the boundary between the plant floor and business networks, using the zone-and-conduit approach of IEC 62443 and the requirements of Ghana’s Cyber Security Act, 2020.

Credentials and standards
  • AVEVA Select Partner
  • IEC 62443
  • ISA-18.2
  • Cyber Security Act, 2020
Engineer working at an industrial network cabinetTalk to us about your operation, your data or your licences.Start a conversation

IEC 62443

The principles behind the approach

  1. 01
    Zones and conduitsSystems with similar security needs are grouped into zones, and every connection between zones is a controlled conduit.
  2. 02
    Security levelsEach zone is given a target security level, from 1 to 4, based on risk.
  3. 03
    Foundational requirementsSeven requirement areas, from identification and authentication to resource availability.
  4. 04
    Defence in depthSeveral independent layers of protection, so one failed control does not expose the plant.

Zones and conduits

The operating data path

OT security separates the plant network from the enterprise network and protects the data path between them.

  1. 05 Decision

    Better decisions at every level.

    Operators respond sooner, engineers find root causes faster, and leadership sees performance across sites with confidence in the numbers.

    • Operators
    • Engineers
    • Leadership

    People

  2. 04 Intelligence

    Information people actually use.

    Data only creates value when the right people can see it clearly.

    • PI Vision
    • Dashboards
    • Operational analytics

    Level 4

  3. Secure conduit

    OT security separates the plant network from the enterprise network and protects the data path between them.

    • Firewall
    • DMZ
    • IEC 62443

    Level 3.5

    Enterprise networkOT network

  4. 03 Industrial data

    One trusted record of the operation.

    The AVEVA PI System collects high-fidelity, time-series data from across your control systems and stores it as a single, reliable history.

    • PI System historian
    • Asset Framework
    • Data quality

    Level 3

  5. 02 Control systems

    Reliable control at the plant floor.

    PLCs, DCS, SCADA and HMIs run the process minute by minute.

    • PLC / DCS
    • SCADA
    • HMI

    Levels 1–2

  6. 01 Plant

    Where operational data begins.

    Every pump, mill, turbine and line generates signals about how the operation is performing.

    • Machines
    • Equipment
    • Sensors

    Level 0

Data rises from the process to the people who decide. Levels follow the ISA-95 / Purdue reference model.

Regulation

Ghana’s Cyber Security Act, 2020

A summary for orientation, not legal advice.

  1. 01
    The Cyber Security AuthorityThe Act established the Authority to regulate cybersecurity activities in Ghana.
  2. 02
    Critical information infrastructureIt provides for the designation and protection of critical information infrastructure.
  3. 03
    Licensed service providersCybersecurity service providers must be licensed by the Authority.
  4. 04
    Incident reportingIt sets out obligations to report cybersecurity incidents.

OT security

What TrustEdge does

  • OT security assessments
  • IEC 62443 alignment
  • Industrial network security
  • Risk & vulnerability review
  • Security baselines

Outcome

Protect critical operations and reduce cyber risk, aligned with IEC 62443 and Ghana’s Cyber Security Act, 2020.

Related capabilitiesOT cybersecurityControl systems

Next step

Talk to us.

Tell us about your site, your data and your operational goals, and we will arrange a time to talk.

Prefer to call? +233 54 083 8349WhatsApp +233 53 439 3537

Book a meeting