Known BearingCYBER RISK ADVISORY

Services

Know where you stand. Prove it. Recover fast.

Every engagement begins with an honest look at where you stand. Each assessment delivers a prioritized action plan ranked by value, so you know what to do first and why.

Policy Assessment

We evaluate your policies, procedures, standards and existing tools against industry frameworks, and rank where to get more from what you already own.

What you get

  • A clear view of how your written policies compare to how things actually run
  • A gap review against recognized industry frameworks
  • A list of protections you already pay for that are underused or misconfigured
  • A prioritized action plan, ranked by value
OT / ICS

Plant-Floor Assessment

A review of the risks unique to your plants, facilities and automated systems, new or existing, against IEC 62443, the industrial cybersecurity standard.

What you get

  • A review of how your plant-floor and facility systems connect to the business network and the outside world
  • Risks ranked by their effect on keeping operations running
  • Findings mapped to IEC 62443
  • Guidance you can use for new lines and facilities, not only existing ones

Insurance Review

We match your real policies and technical controls to your cyber insurance requirements before your insurer audits or challenges a claim.

What you get

  • A line-by-line check of your insurance questionnaire answers against what is actually in place
  • Evidence you can show to back up each answer
  • Gaps to close before renewal
  • Plain-language explanations of what each question really asks

Recoverability Assessment

Resilience and recovery planning for critical operations, from the plant floor to the boardroom, so you can restore.

What you get

  • Identification of the operations your business cannot afford to lose
  • A realistic look at how long recovery would take today
  • A recovery plan that covers people, decisions and systems
  • Steps to shorten recovery time, ranked by value

Staying on course

Risk does not stand still. After the first assessment, we stay with you to keep your bearings current.

Policy upkeep

Keep policies and procedures current as your business, tools and threats change.

Insurance renewals

Prepare accurate, provable answers each time your cyber policy comes up for renewal.

Recoverability verification

Check on a regular schedule that your recovery plan still works.

Services expand as your sites, systems or regulatory obligations change. See pricing.

Pricing

Fixed fees, scaled to you

Every engagement is quoted as a fixed fee before work begins, so you know the cost up front with no hourly meter running.

How the fee is set

Each fee is scaled to your organization's scope and complexity, including:

  • The number of sites, facilities and people involved
  • How many systems are in scope, and whether plant-floor or automated systems are included
  • The regulatory and insurance obligations you need to meet
  • How much documentation and evidence already exists

Assessments and retainers

Each assessment (Policy, Plant-Floor, Insurance or Recoverability) is a fixed-fee engagement.

Ongoing support for policy upkeep, insurance renewals and recoverability verification is offered as a quarterly or annual retainer, also at a fixed fee scaled to your scope. It is adjusted only when your sites, systems or obligations change.

Request a quote →

Not sure where to start?

Tell us what is on your mind and we will suggest the assessment that fits.

Start a conversation