OTRISK
Services

Software first. Services until you don't need them.

The platform encodes the method, but methods live in people. Our OT security experts onboard your team, co-run the first assessment and train your people, at your site or at ours, with one explicit goal: that you run IEC 62443 yourselves, in your own environment, without us.

Services are scoped in the same first call. No separate sales process, no day-rate haggling upfront.

Three ways we help

1
Guided onboarding
We set up your environment together: your risk matrix with your consequence categories, your roles and review flows, your first System under Consideration with the network drawings you already have. Your team drives; we navigate. Typical shape: a handful of working sessions in the first weeks.
2
The first assessment, together
The fastest way to learn the method is to run it on a real system. We co-run your first IEC 62443-3-2 risk assessment or standard assessment (3-3, 2-4, ISO 27001): your people do the work and make the calls, our OT security expert steers the method and challenges the reasoning. You end with a real, reviewed, signed-off assessment and a team that has done it once.
3
Team enablement
Training in the standard and the platform for the people who will carry it: assessors, reviewers, evidence owners, and the board members who must approve what they see. At your plant, where the examples are outside the window, or at our office, away from the daily interruptions.
The promise, plainly

An assessment delivered by consultants expires with the engagement. A team that can run its own assessments compounds. We built the software so the method survives handover, and we deliver services the same way: everything we do with you is done inside your own environment, documented in your process log, repeatable by your people. If we did it right, the second assessment doesn't need us.

That is the point.

Who you get

OT security experts who work in the platform daily and in the standard weekly. Not generic trainers, not a rotating bench. The people who help you are the people who help build OTRISK, which also means your feedback lands unusually close to the roadmap.

Working with your consultancy

Already working with an OT security consultancy? Good, keep them. They can deliver inside your environment with their own roles and a two-stage review that keeps their verdicts and yours separate. Our services cover onboarding and enablement; sector depth and delivery capacity are what partners are for.

Aerial view of the Gate 54 building on the Flight Forum business park, Eindhoven
Gate 54 · Luchthavenweg 54, Eindhoven

At your site, or at ours

First assessments usually benefit from at least one day at the installation, where the examples are outside the window. Training works just as well at our office at Eindhoven Airport: on the edge of Brainport's industrial estate, two minutes off the A2, with the daily interruptions an hour away.

Fair questions

Where do sessions take place?

Your location or ours, your choice. First assessments usually benefit from at least one on-site day at the installation; training works well in either place.

How long until we're self-sufficient?

Depends on team and scope, but the design goal is: after one guided assessment cycle, your team runs the next one alone and we're on call, not on site.

Is this required to use OTRISK?

No. Teams with IEC 62443 experience onboard themselves; the workflow encodes the method. Services exist for teams that want speed or confidence, not as a hidden requirement.

Do you also just do the assessment for us?

That's not our model; a delivered PDF you didn't work on is exactly the dependency we exist to end. If you need full outsourcing, we'll happily introduce a partner consultancy, working in your environment so you keep everything.

Start with the system, not the slideware.

Bring one installation in mind and tell us what your team already knows. In thirty minutes we show you which parts of OTRISK fit your situation and propose the lightest service package that gets you self-sufficient, which is sometimes none at all. You leave with concrete next steps and pricing.