Assessment, assets and risk
Review IT/OT assets, dependencies and communication flows; assess exposure and gaps; analyze risks and deliver an improvement plan prioritized by operational impact.
STRATEC.SYSTEMS / IT/OT cybersecurity
IT/OT cybersecurity for mining and industry
We connect information security with operational continuity. We offer consulting and control integration for corporate networks, cloud, plants, camps and industrial systems, with scope based on assets, risks and process constraints.
Tell us about your projectArgentina · Nationwide services
IT/OT cybersecurity services
Segmentation and secure architecture
Design zones and conduits, IT/OT separation, industrial DMZs and firewall rules. Review communications across networks, control systems and cloud services using least-privilege principles.
Identity, access and hardening
Manage accounts and privileges, apply MFA where supported, enable supplier remote access through VPNs and jump servers, and harden servers, engineering workstations and network devices.
Vulnerabilities and validation
Review configurations, versions and vulnerabilities; prioritize patches and compensating controls. Active testing and penetration testing require authorized scope, technical validation and agreed maintenance windows, particularly in OT.
Visibility, logging and detection
Integrate logs, SIEM use cases and alerts; assess passive OT network monitoring and compatible endpoint protection. Define ownership, handling criteria and escalation procedures.
Response, recovery and training
Develop incident response plans, tabletop exercises and IT/OT training. Review backups, configuration protection and restoration testing, with agreed recovery objectives and documented evidence.
Reference standards, frameworks and guidance
ISA/IEC 62443
Standards series for industrial automation and control system cybersecurity. A reference for OT risk, zones and conduits, security requirements and lifecycle.
Official referenceISO/IEC 27001:2022
Requirements standard for an information security management system. A reference for risk management, responsibilities, documentation and continual improvement.
Official referenceNIST CSF 2.0
Cybersecurity risk management framework: Govern, Identify, Protect, Detect, Respond and Recover. Helps organize priorities and improvement objectives.
Official referenceNIST SP 800-82 Rev. 3
Operational technology security guide. Addresses topologies, threats and safeguards alongside process performance, reliability and safety needs.
Official referenceControls are selected for each project. Consulting does not imply certification or a guarantee of full compliance.
How we approach the project
- Assess assets, risks and gaps with IT and OT teams.
- Agree on controls, priorities and intervention windows.
- Implement, validate, document and hand over to the team.
Frequently asked questions
How are international standards applied?
Requirements and controls are selected for the project scope, assets and risks. Assessments deliver gaps, priorities and evidence of improvement; referencing a standard does not certify the organization.
Can an operating plant be assessed?
Assessment prioritizes documentation, interviews and passive techniques agreed with operations. Any active test or change requires impact assessment, authorization and defined execution conditions.
Does the service include 24/7 monitoring?
A proposal may include monitoring design and integration. Continuous coverage, response times and SOC operation are specified by contract and are not assumed to be included.
Argentina · Nationwide services
Tell us about your project
IT/OT cybersecurity · STRATEC.SYSTEMS