Information security
Penetration testing, security architecture, maturity assessments, training and documentation for companies and enterprises — delivered by certified specialists who understand both corporate IT and the operational technology that runs your facilities.
01 Services
From a first maturity assessment to hands-on testing and staff training — choose a single service or combine them into a complete security program.
Authorized, controlled attacks on your systems to find what a real attacker would — before they do. Every finding is verified, risk-rated and paired with clear remediation guidance.
Security designed in from the start — for new projects, expansions and the modernization of existing IT and OT environments.
An evidence-based review of your people, processes and technology against recognized frameworks — showing where you stand and what to fix first.
People are part of your defense. We train staff to recognize and report attacks, and give technical teams the skills to respond.
Clear, practical documentation that satisfies auditors and customers — and that your teams actually use.
Assessments and tests are carried out by certified cybersecurity specialists — under written authorization, agreed rules of engagement and strict confidentiality.
02 Also available
Focused engagements that complement testing and assessments — scoped to your environment and your risks.
Recurring scans of networks, servers and applications, with remediation tracked to closure.
Security reviews of building automation, CCTV, access control and industrial control networks.
Response plans, playbooks and exercises, so your team knows exactly what to do when it matters.
Internal audits and preparation for ISO/IEC 27001 certification and customer security reviews.
Firewall, Active Directory, server and cloud configurations checked against secure baselines.
Asset inventory, threat modeling and a risk register your management can act on.
03 How we work
Every engagement follows the same disciplined process — nothing is tested without written agreement on scope and rules of engagement.
Objectives, systems and rules of engagement agreed in writing.
Assets, exposure and existing controls mapped.
Hands-on testing and analysis, not just automated scans.
Findings verified and rated by risk and business impact.
Executive summary plus technical detail and evidence.
Guidance during fixes, then a retest to confirm them.
04 Maturity assessment
We score each security function on a five-level scale and compare your current state with the target your business needs. The result is a prioritized roadmap, not just a long list of findings.
| Function | Current | Target | Gap |
|---|---|---|---|
| Govern | 2 | 3 | +1 |
| Identify | 3 | 4 | +1 |
| Protect | 3 | 4 | +1 |
| Detect | 2 | 3 | +1 |
| Respond | 2 | 3 | +1 |
| Recover | 1 | 3 | +2 |
Illustrative example of an assessment output — not client data.
05 IT & OT
ICRS installs and maintains facility systems, so we also know how to secure them. One team covers your corporate IT and the operational technology many security providers overlook.
One assessment across IT and OT
Servers, endpoints, email and collaboration platforms.
Websites, applications, APIs and cloud services.
Awareness, phishing resilience and access hygiene.
BMS controllers, gateways and supervisory software.
Cameras, recorders, controllers and readers.
Controllers, SCADA and process networks.
06 Deliverables
Written for both management and engineers — so decisions get made and fixes get done.
Findings and data are treated as confidential and shared only with your designated contacts.
If you need an assessment
Tell us about your organization, systems and goals — we will propose a scope for testing, assessment or training.
