Service

OT Security Assessment

A security assessment of operational technology: networks, controllers and remote access, done so as not to disturb production.

On this page
  1. When this fits
  2. What the work covers
  3. What you receive
  4. How completion is decided
  5. What you provide
  6. What RJV does not promise
  7. How to start

When this fits

You run plant or control systems and need to know how they could be attacked and what that would do to production.

What the work covers

  • Passive discovery of assets and network paths.
  • Review of remote access, segmentation and credentials.
  • Risk ranking by consequence to production and safety.

What you receive

  • The asset and path inventory.
  • The findings ranked by consequence, with actions.

How completion is decided

Findings are reviewed with plant engineers for accuracy and consequence, and the assessment is complete when the ranked list is agreed.

What you provide

  • Written authority, a safe testing window and the plant engineers.

What RJV does not promise

  • A fixed price or duration before the scope is known.
  • Regulatory approval or a certificate; the customer remains the regulated party.
  • Active testing of live controllers unless it is agreed in writing.

How to start

Describe the problem on the Work with Us page. Every engagement follows the stages on the engineering page, and the commercial terms explain what determines scope and how the work is charged. Ownership at handover is described in deployment and ownership.

Discuss this service

Tell us the outcome you need, the systems involved and the conditions for acceptance. Agree the scope, responsibilities and price before work begins.

Discuss this service
Published
29 October 2026
Revision
1

Last reviewed 29 October 2026.