Your Operational Technology. Protected.

Ensuring your policies and procedures meet regulatory requirements.

www.tuv.com/informationsecurity
T H E C H A L L E N G E O F O P E R AT I O N A L T E C H N O LO G Y ( OT )
A N D I N D U ST R I A L CY B E R S E C U R I TY
As your organisation embraces new connected systems,
equipment and facilities it is vital that cybersecurity related
policies, processes and procedures are created or refrehed
to reflect emerging threats and risks that such systems
can introduce. Applying default IT policies, processes and
procedures to an industrial technology environment can lead
to under provision in important areas, failure to address key
risks and a reduced ability to respond to an incident.
For example:
··Are mobile devices such as smartphones used in your
plant? Could a user take photographs of your plant or
control room? Are control systems accessible from smart-
phones?
··Are accounts shared between users impacting your ability
to track who has been accessing which systems?
··What is the impact of new data protection regulations on
your operational environment?
H OW A R E YO U R P O L I C I E S A N D P R O C E D U R E S AS S E S S E D ?
We will engage with you to help you understand how your
existing policies, processes and procedures address OT
The team is then able to work with you to update your OT
cybersecurity policies, processes and procedures to ensure
they are suitable for your business going forward and help
you meet regulatory and customer requirements.
W H Y AS S E S S YO U R P O L I C I E S, P RO C E S S E S A N D
P RO C E D U R E S ?
··There has been an incident or event that has challenged
an existing policy, process or procedure.
··Audits or reviews have identified issues and you need help
in implementing new policies.
··Systems have been breached but those responsible can-
not be held to account as there is no suitable policy
in place.
··You are concerned how upcoming industrial security regu-
lations may impact plant operations or personal informati-
on.
WO R K I N G W I T H T Ü V R H E I N L A N D
The TÜV Rheinland 145+ year heritage gives us a deep
understanding of the markets we serve, with unmatched
depth of experience solving complex safety, security, data
privacy, and infrastructure challenges.

® TÜV, TUEV and TUV are registered trademarks. Utilisation and application requires prior approval. 08.2018
cybersecurity issues in your business. These will be compa-
red against best practices developed at TÜV Rheinland as
well as appropriate industry standards. This is a collaborative
process enabling you to gain proactive insight from our team
of industrial security experts.

I N D U ST R I A L S E C U R I TY R I S K
ASSESSMENTS
Do you understand your operational
technology and industrial
security risk?
OT A R C H I T E C T U R E R E V I E W
Is your industrial technology design
and architecture secure and
compliant with cybersecurity
standards and regulations?
OT SYST E M S P E N E T R AT I O N
T E ST I N G
Do you need to undertake operational
technology vulnerability assessments
and penetration tests?
OT S E RV I C E S F O R T H E
N U C L E A R I N D U S T RY
Do you understand your nuclear
facility operational technology and
industrial security risk?

OT P O L I CY, P R O C E S S A N D OT SYST E M S I N C I D E N T OT SYST E M S S E C U R I T Y OT S E RV I C E S F O R T H E R A I L

PROCEDURE REVIEW
Are your policies, processes and
procedures keeping up with the
unique cybersecurity and regulatory
requirements of industrial and
operational technology systems?
R E S P O N S E A N D R E C OV E RY
Do you have existing operational
technology incident response and
recovery plans in place?
M O N I TO R I N G
Do you know what is happening on
your OT network and systems?
A N D T R A N S I T I N D U S T RY
Do you understand your overall rail
and transit systems operational
technology and industrial
security risk?

Overview industrial security service portfolio

TÜV Rheinland
Digital Transformation & Cybersecurity
otsecurity@tuv.com

www.tuv.com/en/industrial-sec