Industrial Cyber Protector-ICS/OT cybersecurity guidance platform.

Example

ICP helps organizations design an incident response plan that focuses on operational continuity. During a ransomware attack on an oil pipeline, ICP facilitates safe recovery by ensuring critical functions remain operational while the attack is mitigated.

Scenario

An energy company might use ICP to simulate responses to malware attacks, ensuring that its control systems can continue functioning without spreading the infection to other critical systems. The result is minimized downtime and enhanced resilience against attacks.

Example

ICP supports creating segmented architectures and implementing DMZs for ICS, where communication between control systems and external networks is limited. This was crucial for a water treatment plant that used ICP to redesign its network, ensuring tighter control over access and monitoring.

Scenario

A manufacturing plant could use ICP to implement segmentation and minimize communication between IT and OT systems, reducing the risk of lateral movement by threat actors. This segmentation also allows for more effective monitoring and alerting of any unusual activity.

Example

By deploying continuous network security monitoring tools, ICP enables real-time analysis of ICS environments. During a cyber-attack on a gas pipeline, the monitoring systems provided immediate alerts to operators, allowing them to act quickly to contain the threat.

Scenario

In an industrial plant, ICP's monitoring tools would provide visibility into communication between programmable logic controllers (PLCs) and human-machine interfaces (HMIs), flagging any irregularities in traffic or command execution, which could signal an attack or system misconfiguration.