Understand
Consequence, safe state and dependencies.
Protect production without putting production at risk
Reduce cyber exposure while respecting physical safety, availability, legacy equipment and maintenance windows.
Client situation
In OT, defense must protect the process, not just the network.
IT/OT convergence, vendor remote access and long-lifecycle assets create exposure without allowing aggressive changes.
What Bellot reviews
We look at the real environment, not a generic checklist.
- IT/OT boundaries and remote access
- PLCs, HMIs, engineering and historians
- Process dependencies and availability
- Compensating controls and passive visibility
What you receive
Clear outputs your team can use.
- OT architecture and asset map
- Scenarios tied to physical consequence
- Safe segmentation and hardening plan
- Monitoring and operations-aligned runbooks
How the engagement works
A controlled path from context to operational capability.
Observe
Map assets, flows and access.
Architect
Define zones, controls and visibility.
Prepare
Validate response without threatening production.
Engagement modes
Assessment, engineering or continuous evolution, each with a different commitment.
Assessment
Diagnosis, evidence and prioritized plan.
Engineering project
Implementation, validation and technical transfer.
Continuous evolution
Review, tuning and improvement in defined cycles.
Harpia / Operational role
AI expands analysis. Authority stays explicit.
With authorized and safe sources, Harpia relates IT, remote access and OT telemetry without commanding the industrial process.
What we need from the client
- Automation, maintenance, IT and process safety
- Diagrams and approved windows
- Safety and change rules
Boundaries and exclusions
- Safety and continuity take priority
- No active scanning without approval
- Production testing is coordinated
Complementary modules
- IT/OT segmentation
- Secure remote access
- Passive inventory
- Training
When to engage
Bring Bellot in when the next defensive decision requires evidence.
Growing IT/OT convergence
Third-party remote access
Plants without dedicated OT architecture
Scope, access and operating boundaries are confirmed before work begins.
Discuss my industrial environment