# Industrial Control System (ICS) Security Assessment

> From $35K · Offensive Security · https://cisomarketplace.services/services/industrial-control-system-ics-security-assessment

Specialized security assessment for industrial control systems, SCADA networks, and operational technology environments, focusing on both cyber and physical security aspects.

## In scope

- ICS network architecture review
- SCADA system security testing
- PLC/RTU security assessment
- Protocol analysis (Modbus, DNP3, etc.)
- Safety system security review
- Human-Machine Interface (HMI) testing
- Physical security controls assessment

## Deliverables

- Detailed ICS security report
- Network architecture recommendations
- Protocol security analysis
- Safety system findings
- Physical security recommendations
- Remediation priority matrix
- 90-day retest period

## Tiers

### Core ICS Security Assessment: $35K

Assessment of 1 site and one control system: ICS network architecture review, passive traffic capture, SCADA and HMI configuration review, a sample of up to 25 PLCs/RTUs/HMIs, and analysis of up to 2 industrial protocols. Includes a retest.

Limits: locations 1, devices 25

Includes:
- ICS network architecture and segmentation review
- Passive traffic capture and asset inventory
- SCADA server and HMI configuration review
- Sample of up to 25 PLCs/RTUs/HMIs
- Analysis of up to 2 protocols (e.g. Modbus, DNP3)
- Report, remediation priority matrix, 90-day retest

Excludes:
- Safety instrumented system review
- Active testing against controllers
- Physical security controls assessment
- Additional sites

### Advanced ICS Security Program: $60K

Assessment of up to 2 sites and up to 75 controllers/HMIs. Adds active protocol testing in a maintenance window or test bed, safety system security review, HMI application testing, and physical security controls assessment. Includes a retest.

Limits: locations 2, devices 75

Includes:
- Everything in the Core tier, for up to 2 sites
- Active protocol and controller testing in an agreed window or test bed
- Safety system security review
- HMI and engineering workstation testing
- Physical security controls assessment
- 90-day retest

Excludes:
- IT/OT convergence assessment of the corporate network side
- OT monitoring design and setup
- Custom test tooling for proprietary protocols

### Enterprise ICS Security Solution: $95K

Assessment of up to 4 sites and up to 200 controllers/HMIs. Adds IT/OT convergence testing from the corporate network into OT, custom test tooling for proprietary protocols, and OT monitoring setup with detection use cases. Includes a retest.

Limits: locations 4, devices 200

Includes:
- Everything in the Advanced tier, for up to 4 sites
- IT-to-OT attack path testing across the corporate boundary
- Custom test tooling for proprietary or vendor-specific protocols
- OT monitoring setup with tuned detection use cases
- Network architecture recommendations per site
- 90-day retest

Excludes:
- Monitoring product licences and sensors
- Remediation engineering
- Multi-month security program build (see ICS Security Program)

## Terms

Starting price shown is the lowest published tier. A written proposal fixes scope, tier and price before anything is signed. Timeline is set in the SOW.

Scope this engagement: https://cisomarketplace.services/scope?service=industrial-control-system-ics-security-assessment