OT Assessment for One of the Largest Oil & Gas Companies in the UAE
The Challenge
Decades of expansion had left a mix of legacy PLCs, distributed control systems, and newly connected equipment across sites, with vendor remote access arrangements that no single team fully owned.
The operator needed an accurate picture of assets and exposure, and a roadmap aligned to IEC 62443, without any assessment activity that could disrupt production or safety systems.
“We had assumed our OT was air-gapped. The assessment showed exactly where it wasn't, and gave us a plan the plant engineers actually agreed with.”
The Execution
Discover
Passive network captures and site walkdowns across upstream and processing facilities built a verified inventory of controllers, HMIs, protocols, and network paths.
Assess
Production-aware testing, coordinated hour by hour with plant engineers, identified flat networks, exposed engineering workstations, and unmanaged vendor remote access.
Analyze
Findings were mapped to IEC 62443 zones and conduits and ranked by safety and production impact rather than generic severity scores.
Roadmap
We delivered a phased remediation plan fitted to maintenance windows, with segmentation designs and monitoring requirements for each site.
The Outcome
The operator now has a maintained OT asset inventory, controlled vendor access, and a segmentation program under way across its sites, with zero unplanned downtime during the assessment.
The IEC 62443 gap analysis gives the board and regulators a defensible, measurable baseline for the years ahead.