OT Cybersecurity Assessment Tiers

1. Essential OT Review
A foundational snapshot of your OT security posture A streamlined assessment focused on documentation review and high-level architecture validation. Ideal for organizations beginning their OT security journey or seeking a baseline understanding of risks.

Includes:

  • OT network documentation review
  • High-level architecture and asset mapping
  • Policy & procedure alignment check
  • Foundational risk observations and quick-win recommendations

2. Standard OT Assessment

Operational visibility with targeted technical validation Combines documentation review, stakeholder interviews, and selective technical analysis to identify control gaps and prioritize remediation.

Includes:

  • Interviews with engineering, operations, and security teams
  • OT network segmentation and access control review
  • Vulnerability and configuration analysis (select systems)
  • Prioritized risk register with tactical recommendations

3. Advanced OT Security Assessment

Deep-dive evaluation of controls, resilience, and threat exposure A comprehensive assessment of your OT environment, including detailed technical testing, architecture validation, and resilience analysis.

Includes:

  • Full OT network architecture and data flow analysis
  • Configuration and hardening review of critical assets
  • OT-specific threat modeling and attack-path analysis
  • Maturity scoring aligned to NIST CSF / ISA/IEC 62443
  • Strategic and tactical remediation roadmap

4. Comprehensive OT Resilience Assessment

Enterprise-grade, end-to-end evaluation for high-risk or regulated environments The most extensive assessment, combining technical analysis, resilience testing, governance review, and operational readiness validation.

Includes:

  • Full-scope OT architecture, controls, and governance review
  • Incident response and recovery capability assessment
  • OT/IT convergence risk analysis
  • Regulatory alignment (TSA, MTSA, NERC CIP, etc.)
  • Executive-level findings, heat maps, and multi-year roadmap

TSA Cybersecurity Directives

Security Directives and Emergency Amendments
Final Rule: Cybersecurity in the Marine Transportation System