# Industrial Control Systems Security Program

> From $85K · Specialized & Industry · https://cisomarketplace.services/services/industrial-control-systems-security-program

End-to-end security program for industrial control systems and operational technology environments, including SCADA systems, PLCs, and industrial IoT devices.

## In scope

- ICS network assessment
- SCADA system security review
- PLC security hardening
- Industrial IoT evaluation
- OT/IT convergence analysis

## Deliverables

- OT security architecture
- Network segmentation design
- Security controls matrix
- Incident response procedures
- Compliance documentation
- Training materials

## Tiers

### Core ICS Security Program: $85K

Program for 1 site: ICS network assessment, SCADA security review, OT security architecture and segmentation design, security controls matrix, OT incident response procedures, and training materials. Monitoring is specified, not deployed.

Limits: locations 1, months 4

Includes:
- ICS network and SCADA security assessment of 1 site
- OT security architecture and network segmentation design
- Security controls matrix
- OT incident response procedures
- Monitoring requirements specification
- Staff training materials

Excludes:
- PLC-level hardening work
- Monitoring implementation
- IT/OT convergence planning across the corporate network
- Additional sites

### Advanced ICS Security Solution: $145K

Program for up to 3 sites. Adds PLC configuration analysis and hardening baselines, industrial IoT evaluation, IT/OT convergence plan, OT monitoring implementation with detection use cases, and compliance documentation.

Limits: locations 3, months 5

Includes:
- Everything in the Core tier, for up to 3 sites
- PLC configuration analysis and hardening baselines
- Industrial IoT device evaluation
- IT/OT convergence plan
- OT monitoring implementation and tuning
- Compliance documentation set

Excludes:
- Round-the-clock monitoring operations design
- Custom tool development
- OT incident response exercises

### Enterprise ICS Security Platform: $225K

Program for up to 5 sites. Adds custom tooling for asset discovery or protocol inspection, design and stand-up of 24/7 OT monitoring processes, OT incident response playbooks with 2 exercises, and program governance. More sites are scoped separately.

Limits: locations 5, months 6, scenarios 2

Includes:
- Everything in the Advanced tier, for up to 5 sites
- Custom tooling for asset discovery or protocol inspection
- 24/7 OT monitoring process design and stand-up with the client's SOC or provider
- OT incident response playbooks and 2 tabletop exercises
- Program governance and metrics

Excludes:
- Staffing of the 24/7 monitoring function
- Monitoring licences and hardware
- More than 5 sites (scoped separately)

## Terms

Starting price shown is the lowest published tier. A written proposal fixes scope, tier and price before anything is signed. Timeline is set in the SOW.

Scope this engagement: https://cisomarketplace.services/scope?service=industrial-control-systems-security-program