EN
Contact & Support
MenuMenu
Automation
Virtual commissioningvalidate the plant on a modelPLC programmingTIA, TwinCAT, CodeSysRobot programmingKUKA, ABB, FANUC, URFunctional safetysafe stop, guardingElectrical designdiagram and control cabinetOn-site commissioningstart-up at the real plantBuildings and processesbuilding and process automationTechnical project managementcoordinate teams and versionsMaterial flow simulationthroughput and cycle timeTrainingtrain staff on the modelOpen overviewVirtual commissioning FAQTerms in automation & virtual commissioning
Industrial IoTSoftwareAIIT/OTProductsCompany
Legal NoticePrivacy PolicyCookie PolicyTermsAccessibilitySitemap
Ai

Secure production plants without
losing sight of their function

Connect machine knowledge with segmentation, access protection and planned operation.

Industrial systems cannot be changed like any office application. Availability, manufacturer conditions and existing controllers limit the possible security measures.

IQstruct Engineering looks at the interface between the machine and the IT/OT infrastructure. Survey, asset inventory, segmentation, hardening, backup and remote access are possible building blocks. For legacy systems, restricted access and additional protective measures are weighed against a possible replacement.

Start now at no cost

In a free first conversation we look at your plant network and place which security level comes into question for which zone.

See the person in charge

Scope of services

Record the plant and data paths

Critical systems and their communication dependencies are considered.

Align protection with the environment

Access, network separation and backup are coordinated with the plant function.

Implement changes as planned

Maintenance windows and tests take production operation into account.

Security at the interface between machine and IT

IQstruct Engineering looks at the interface between the machine and the IT/OT infrastructure with the knowledge gained in automation.

Survey, asset inventory, segmentation, hardening, backup and remote access form the building blocks. Availability, manufacturer conditions and existing controllers determine which measures are possible on a plant. On request, we align the measures with IEC 62443 and take on the provision of evidence in accordance with the standard.

Not every plant can be updated or replaced at short notice. For legacy systems, restricted access, an additional security layer, communication limited to what is necessary, allowlisting and increased monitoring come into question. If the remaining risk cannot be reduced to an acceptable level in this way, we plan a retrofit or system replacement.

Controller modules on a DIN rail with blue wiring
Ai

OT security

The plant stays protected and functional

Protective measures are coordinated with plant function, availability and production operation.

Approach in the project

  1. A technician records the nodes of the production network on the screen, the network rack beside herAi

    1

    Record production networks

    Machine participants and transitions to the factory and office network are checked on site.

  2. Two technicians configure firewall rules between IT, DMZ and OT on the screenAi

    2

    Secure OT access

    Industrial network devices and controlled transitions are configured.

  3. A technician accesses the operator screen of a process plant through a secured access while a colleague watchesAi

    3

    Reach an OT device from outside

    Authorised people reach an OT system via a secured access path.

  4. Three people manage access tokens with expiry date and status on the screenAi

    4

    Manage access

    Keys and access tokens are created, checked and revoked where needed.

Protection for legacy systems

Restrict access

Only authorised people and systems reach the plant.

Shield

An additional security layer protects systems that cannot be updated.

Monitor

Increased monitoring reports conspicuous communication.

Information security

Protecting confidential project data reliably

In the automotive industry, TISAX creates a common basis for handling confidential information.

Manufacturers and suppliers exchange design data, software and further sensitive project information. TISAX makes it possible to assess information security against common criteria and to share the results with business partners. As an engineering service provider in this supply chain, IQstruct Engineering likewise commits to protecting the information entrusted to it and holds a TISAX label. Clear access rights, governed data exchange and traceable responsibilities are therefore part of the cooperation in a project as well.

Information security, audits and evidence

Frequently asked questions

We are glad to answer your detailed questions in a personal conversation.

How are tests on running plants coordinated?

We plan tests on running plants separately and coordinate them with those responsible for operation.

What happens to plants that cannot be updated?

Compensating measures such as access restriction, shielding and monitoring protect them. If the risk remains too high, we plan the replacement.

Do the measures guarantee freedom from attacks?

Security measures reduce risks in a traceable way. We do not promise complete freedom from attacks.

Does IQstruct Engineering support the provision of evidence under IEC 62443?

We align segmentation, access and hardening with the standard and prepare the evidence. The assessment itself is carried out by an independent certification body.

Further industry solutions

Every industry has its particularities. That calls for a reliable partner who knows the requirements and delivers suitable solutions.

First conversation

Arrange a free first conversation

Describe your task. We agree a date and discuss the possible project scope.

  1. Notebook on a desk with an open calendar and a selected appointmentAi

    1

    You request an appointment

  2. Joint planning of a segmented IT and OT infrastructure on a network diagramAi

    2

    We discuss your requirements

  3. Discussion of a security analysis with a network diagram and a list of measuresAi

    3

    You receive a quotation for the agreed scope

Philipp Niemann-Stryczek
Philipp Niemann-StryczekManaging DirectorLeads the company on the commercial side and answers questions on IT/OT security, asset administration shells, compliance and research projects.
Free first conversation

Describe your task in the contact form. We come back with a proposed date.

Arrange a first conversation

Not quite what you need?

Discover further suitable services.

Network security and zones

Separate production and office areas and define the communication paths required.

Learn more

Vulnerabilities and updates

Prioritise findings and plan updates to suit your operating systems and plants.

Learn more

PLC programming, HMI and SCADA

Connect sequence control, operation and diagnostics in one coordinated automation concept.

Learn more