OT & IOT Security

Threats to OT systems often mean life or death, and are no longer theoretical. We offer an array of services to help you navigate this highly specialised area of security. You know that feeling when some new IT guy rocks up on site and tells you to enable automatic software updates on your industrial control system? Yeah, so do we. That’s why we’ve invested heavily in our OT security capability, to make sure neither of us ever have to deal with that again.

OT & IOT Security Services

Risk Assessment

It is impossible to ensure the effective ongoing operation of your critical systems without an understanding of your specific risks. Our expertise helps you to go beyond generic/boiler plate approaches, which may ‘tick the box’ but not address the underlying and specific risks to your operational context.

Security Health Check

With cyber-physical systems being among the most commonly targeted, it is vital to get a clear picture of your system’s health. We have extensive experience in delivering availability-focused security assurance services to clients operating sensitive and highly-targeted OT and IoT systems. We have expertise in various technologies, including SCADA, ICS, IIoT, and smart systems/devices.

SOCI Compliance

The recent changes to Australia’s Security of Critical Infrastructure Act (SOCI) have broadened the definition of Critical Infrastructure to include a much larger number of sectors and enforce stricter security standards. We can assess your SOCI applicability and help you implement a strategy to maintain compliance, including cybersecurity roadmaps, asset identification, and critical infrastructure risk management.

Threat Modelling

Threat modelling is an important input into understanding your operational context and developing ‘fit for purpose’ threat mitigation measures. We have expert practitioners in this domain with in-depth threat assessment experience across a wide portfolio of operational technologies.

Resilience Assessment

Resilience is a vital component of your protection strategy. It provides for an organisation’s capacity to anticipate, withstand, and recover from an extreme cyber event. Anchoram have developed a proprietary methodology on resilience assessment, based on published academic papers written by our own associates. How cool is that?

Regulatory Audits

It is crucial to audit your security controls in order to ensure they are effective; especially for systems that bear catastrophic health, safety, security, or environmental risks. We are qualified and experienced in all aspects of critical infrastructure compliance, including those related to SOCI, TSS, FATA, and FIRB (including audits of OT assets).

Practice Lead

Harpreet Cheema
COO
Anchoram Global
Harpreet's role as a partner and chief operating officer is focused on delivering the vision of the founding partners of the firm. Anchoram Consulting has been founded by a group of senior and experienced professionals, who have all worked in public sector, industry and large global consulting powerhouses, and share a common purpose to serve organisations with strong client service ethos.
His own working life has spanned over 17 years and has included working in direct customer service roles, working from within the public sector, and a stint in KPMG Brisbane where he gained exposure to the Energy and Resources and Transport and Logistics sectors. Harpreet's last significant role was as a Principal in Deloitte’s Canberra practice where he led its federal government Cyber Risk Advisory team. Over the last 9 years, while working in a Big 4 consulting environment, he has led the delivery of numerous assurance and advisory engagements for various public, private and not-for-profit sector entities.
View full profile