If one of these sounds familiar, it is worth a conversation.
We map the current architecture together with your people, divide the systems into zones and conduits and set security level requirements based on the risk assessment. The result is a target picture with a realistic path to it, in steps that fit turnarounds and ordinary projects. Some set SL requirements too low, others too high and unrealistic. The art is finding the right, balanced level for the system as a whole, in the context it operates in. We make sure the whole chain holds together: the level actually needed, what can be delivered, how the requirements are set towards suppliers, how deliveries are followed up, and how the level is maintained in operations.
