Senior OT security leadership, without the permanent headcount.
Most industrial organisations need experienced OT security leadership long before they can justify a full-time hire — and the people who can do the job are scarce. A retained arrangement gives you that seniority on a defined commitment: someone accountable for the programme, present at the right meetings, and answerable when something goes wrong.
- Retained
- Defined monthly commitment
- Accountable
- Named senior lead
- Transitional
- Builds toward in-house
Standards in scope
Programme ownership
Running the security programme
Governance
Policy, standards and decision rights
Operational readiness
Incidents, drills and response
Capability transfer
Building the permanent team
What the role actually carries.
This is not advisory-by-email. The engagement is defined around a set of responsibilities, a reporting rhythm and a handover plan so that capability ends up inside your organisation.
Running the security programme
Owning the OT security roadmap end to end — what gets done, in what order, by whom, and what it costs — with progress reported in terms the board understands.
How we support you
- Security programme roadmap and prioritisation
- Budget input and business case support
- Monthly and quarterly progress reporting
- Risk register ownership and escalation
- Steering committee participation
- Board and executive briefings
Policy, standards and decision rights
Establishing who decides what across the IT and OT boundary, and the policy set that makes those decisions repeatable rather than personality-dependent.
How we support you
- Policy and standards development
- RACI across IT, OT and engineering
- Exception and risk acceptance process
- Change and configuration governance
- Vendor and contractor security requirements
- Compliance obligation tracking
Incidents, drills and response
Making sure the organisation can respond when something happens — and that the response accounts for safety and production, not just data.
How we support you
- Incident response plan for OT scenarios
- Escalation paths and contact trees
- Tabletop exercises with plant leadership
- Post-incident review and improvement
- Crisis communication support
- Third-party and vendor incident coordination
Building the permanent team
The point of the engagement is to end it. We define the target role, support recruitment and hand over a running programme rather than a consulting dependency.
How we support you
- Target operating model and role definition
- Recruitment support and technical interviewing
- Onboarding and mentoring of the permanent hire
- Documentation and runbook handover
- Phased reduction of the retained commitment
- Post-handover advisory availability
What the retained engagement covers.
The same seven services run across every practice, so you can compare scope without re-learning the menu.
Risk assessment
Owning the OT risk register — keeping it current, keeping it honest, and making sure it drives the roadmap rather than decorating it.
Advisory & consulting
Being available for the decisions that cannot wait for a project: vendor selection, architecture calls, incident judgement and regulatory questions.
VA-PT & security testing
Defining the assessment and testing programme, scoping engagements and holding testers to results you can act on.
Compliance & audit readiness
Tracking obligations across standards and regulators, and owning audit preparation and finding closure.
Implementation support
Overseeing delivery — holding integrators and vendors to the security requirements you set, and verifying what was actually built.
Security operations
Governing monitoring and response coverage, reviewing incidents and driving improvement between events.
Training & capability
Setting the capability plan for engineering and operations, and mentoring the team that will eventually take over.
How engagements are typically shaped
- Defined days per month with agreed availability
- Named senior lead, not a rotating bench
- Site visits at agreed frequency
- Steering committee and board attendance
- Escalation availability for incidents
- Fixed monthly fee, no utilisation surprises
- Quarterly review of scope and value
- Explicit handover milestone from the start
What you receive
- OT security roadmap with sequencing and budget
- Risk register and monthly reporting pack
- Policy and standards library
- Incident response plan and exercise reports
- Audit and compliance obligation tracker
- Handover documentation and target role definition
Need senior OT security leadership now?
Tell us the size of the estate, what is already in place and what is forcing the timeline, and we will propose a commitment level that fits.
