We provide independent advice on security in industrial control and automation systems. Four service areas, one foundation: risk, architecture, verifiability and competence.