SCADA Security Assessment
It is true that a simple Nessus or Nmap scan can bring down a critical control system application. However, isn’t this something you should know and address before an attacker or an IT Department staffer gains access to the SCADA or DCS and inevitably starts with these tools?
Our team uses an arsenal of assessment tools and methodologies similar to those used by attackers on the net, using automated scanning tools, commercial scripts, in-house developed scripts, manual testing and best of breed open-source assessment tools specific to application, protocol or exploit code.
Our team performs comprehensive assessment of your critical infrastructure in following manner:
- Security Architecture Review
- Evaluate the network design of the SCADA environment, analyzing the security controls in place and the connectivity between the SCADA environment and the corporate network.
- Critical Infrastructure Security Testing
- Evaluate the security of systems in the SCADA environment including routers, firewalls, control system servers, database systems, and ICCP gateways.
- Host Security Configuration Review
- Assess the configurations of routers, firewalls, and SCADA servers against known industry best practices while looking for known vulnerabilities associated with the deployed product and associated utilities.
- Wireless Access Review
- Identify wireless access into the environment and evaluate weaknesses that could allow an attacker to gain access to the SCADA network.
- Remote Access Review
- Identify systems with dial-up and remote access capability that could allow an attacker to gain access to the SCADA network.
- Policies & Procedures Gap Analysis
- Evaluate the current policies and procedures for critical infrastructure against known best practices according to the ISA-SP99 security standards.
- Interviews with managers, operators, engineers and system administrators
- Review and audit of key procedures such as change control, backup, incident detection and recovery
- Analysis of the ability to recover from a cyber attack
- Analysis of the physical security of cyber assets
We provide final report with prioritized list of vulnerabilities, compensating controls for vulnerabilities that cannot be directly addressed and develop actionable recommendations to mitigate the risks your environment faces from external attackers, insider threats, automated worms, and network management errors to maximize improvement of your environment security posture.