OTRISK
Book a demo
Asset owners Integrators & service providers Product suppliers Consultancies & auditors
Solutions · Integrators & service providers

Your customers now write IEC 62443 into contracts.

You integrate or maintain OT for asset owners who are suddenly accountable under NIS2. Their duty lands on your desk as questionnaires, contract clauses and audits. Answer it once, properly, and conformance becomes a bid advantage instead of overhead.

Book a demo

The situation, named

A different questionnaire per bid.
Every customer asks the same questions in a different spreadsheet. The answers live in the last proposal, somewhere.
Proof scattered per project.
Your security practices are real, but the evidence sits in project folders, mailboxes and people's heads, unfindable at audit time.
Audits reaching into delivery.
Customers now audit their supply chain because the law tells them to. Their auditor's questions arrive at your delivery organisation.

The parts that apply to you

IEC 62443-2-4Your program. The yardstick for integration and maintenance providers: the part your customers' supply-chain duty measures you against.
IEC 62443-3-3The systems you deliver. Contracts quote security levels; evidencing the delivered system against its SL target is becoming part of handover.
IEC 62443-3-2The assessment your customers run. Its CRS is the spec you build against, and your IEC 62443-2-4 and 3-3 evidence answers it in their environment.

What you run in OTRISK

1

Your own conformance, standing. Assess your program against 2-4 once, keep the evidence owned and reviewed, and stop rebuilding it per bid. The next questionnaire is a lookup, not a project.

2

Third-party mode in customer environments. When a customer runs OTRISK, you answer inside their environment with your own roles. Two-stage review keeps your lead's verdicts and theirs separate, and your internal notes stay yours.

3

Conformance as a bid asset. "We maintain a standing IEC 62443-2-4 assessment, reviewed on the record" is a sentence competitors without a system can't write.

Honest scope: when the asset owner runs OTRISK, the shared work lives in their environment. That is the point of the supply-chain duty. Your own program and evidence live in yours.

Prove it once. Reuse it every bid.

Thirty minutes with an OT security expert. Bring the last customer questionnaire you dreaded. We show you which parts of OTRISK fit your situation and how the way of working looks, and you leave with concrete next steps and pricing.

Book a demo