# OT Cyber Consulting

> Program strategy, architecture guidance and hands-on engineering from someone who has run the plant network, not just audited it.

Canonical: https://blackbirdcyber.com/capabilities/ot-cyber-consulting  
Blackbird Cyber · https://blackbirdcyber.com/ · sales@blackbirdcyber.com

## Engagement

- Engagement: Retainer · monthly
- Delivery: Remote + on-site
- Mapped to: IEC 62443-2-1 · NIST CSF

## Scope — Leadership across every level of the plant.

We sit on your side of the table with vendors, integrators and regulators, and own the OT security roadmap end to end.

- Security program roadmap tied to plant capital cycles
- Zone and conduit design reviews for new projects
- Vendor remote access policy and enforcement
- Incident response plan and tabletop exercises
- Regulator and auditor liaison

## Purdue levels in scope

| Level | Name | Systems | Scope |
| --- | --- | --- | --- |
| L5 / L4 | Enterprise | ERP, Email, Corporate AD | In scope |
| L3.5 | Industrial DMZ | Jump host, Patch relay, Historian mirror | In scope |
| L3 | Site operations | Historian, Eng. workstation, Domain ctrl | In scope |
| L2 | Supervisory | SCADA server, HMI, Alarm server | In scope |
| L1 | Control | PLC, RTU, Safety PLC | In scope |
| L0 | Process | Sensors, Actuators, Drives | In scope |

## Engagement timeline — The first ninety days.

- PH 1 · WK 1–2 · **Baseline**: Current program, assets, network and people. Where the gaps actually are.
- PH 2 · WK 3–6 · **Roadmap**: Prioritized by consequence. Sequenced to outages and budget.
- PH 3 · WK 7–12 · **Execute**: Quick wins shipped with your team. Vendor access closed first.
- PH 4 · ONGOING · **Steward**: Monthly cadence, quarterly posture review, on call for incidents.

## You receive

Program roadmap, zone and conduit model, remote access policy, IR plan, quarterly posture report.

## We need from you

A named plant contact, drawings and asset lists as they exist, and one afternoon a month with operations.

## Other capabilities

- [OT Network Architecting](https://blackbirdcyber.com/capabilities/ot-network-engineering): Segmented control networks designed and built to keep the process running.
- [OT Cyber Audit](https://blackbirdcyber.com/capabilities/ot-cyber-audit): A site-level assessment of control system exposure, ranked by consequence.
- [OT Cyber Program Review](https://blackbirdcyber.com/capabilities/ot-cyber-program-review): An independent review of your OT security program against the standards your regulators cite.

## Scope this engagement

Use the [contact form](https://blackbirdcyber.com/contact) or email sales@blackbirdcyber.com.