# Ensuring Industrial Control Systems Cyber Security – CyberPrism Case Study

# CyberPrism Oversees Cyber Security Compliance for Tier 1 Contractor During Major Platform Integration

## The Challenge

Cyber Prism was invited by a global Tier 1 Contractor to provide a proposal for Industrial Control Systems Cyber Security. The project formed part of the Engineering, Procurement, Construction, and Installation contract awarded to the Contractor by a major operator for a gas field in the North Sea.

## Overview

We provided three distinct Industrial Control Systems Cyber Security deliverables in support of the project: an upfront design review, cyber security factory acceptance testing, and cyber security site acceptance testing, including a non-invasive vulnerability assessment.

## The Details

Our team of experienced professionals began by reviewing the existing wellhead platform design, specifically around the interface between safety and security.

We performed an independent review of all documentation generated during the ZCR1 to ZCR6 processes of IEC62443-3-2 (Identification of System Under Consideration, Initial Risk Assessment, Partition of the System Under Consideration, Detailed Risk Assessment, Documentation of Cyber Security Requirements Specification), to deliver a Cyber Security assessment report which detailed the delta between the pre-existing documentation and that detailed by the HSE as being evidence of good practice within its Cyber Security for Industrial Automation and Control Systems inspection guide.

The team worked alongside the company’s vendors to ensure the Cyber Security Network Engineering requirements were understood and implemented and reviewed the Cybersecurity Factory Acceptance Test documentation to develop the Cyber security Site Acceptance Test procedures incorporating the updated Cybersecurity Factory Acceptance Test following their completion to ensure correct implementation through the approved change management process. In addition both an active and passive asset assessment was incorporated within these test procedures, this included collection of compliance evidence and assurance that the all latest software and firmware was applied prior to deployment.

## Outcomes

The cooperation between Cyber Prism, the Tier 1 Contractor and their vendors proved to be a successful collaboration, providing constructive advice and implantation to produce a Cyber Secure project, with a great outlook for the future.