Skip to content
NelnationaleConsulting

Industrial & OT Technology

OT/IT Convergence Architecture

Purdue-model zoning, DMZ design, segmentation and secure remote access for live plant networks.

Overview

The corporate network and the plant network were built by different people, for different purposes, decades apart. The joint between them is where most industrial incidents begin.

We design that joint properly: zones and conduits that an auditor accepts and an operations team can actually live with, implemented without asking for a shutdown nobody will approve.

What is included

  • Current-state network discovery and architecture review
  • Purdue-model zone and conduit design
  • Industrial DMZ specification
  • Firewall rule design and monitor-mode validation
  • Secure remote access for staff and vendors
  • Phased cutover plan aligned to existing maintenance windows
  • Change management process handover
  • As-built documentation and network diagrams

How we run it

  1. 01

    Scope

    Site walkdown and passive discovery across a full operating cycle, including month-end and vendor sessions.

  2. 02

    Build

    Zone, conduit and DMZ design, with rules run in monitor mode before enforcement.

  3. 03

    Launch

    Conduit-by-conduit cutover inside maintenance windows that already exist.

  4. 04

    Measure

    Handover to operations with a change process they helped write.

Questions

Before you enquire

Will this require a plant shutdown?
Our sequencing is designed so it does not. We fit cutovers inside maintenance windows that are already scheduled.
How long does discovery take?
Six weeks is usually the minimum to capture seasonal modes, batch jobs and vendor maintenance. Two weeks misses too much.
Do you work on live safety systems?
We design around them and never make changes to safety instrumented systems without the safety authority in the room.

Often bought together

ICS & SCADA Security Assessment

Passive asset discovery, vulnerability triage and a ranked, costed remediation roadmap.

Industrial Identity & Access

Machine and human identity, certificate lifecycle and least-privilege access for controls engineers and vendors.

Vendor & Contractor Governance

Third-party access control, change management and supply-chain assurance for plant equipment.

Next step

Need ot/it convergence architecture?

Tell us what you are trying to achieve and by when. We will come back with scope, price and an honest view on fit.

Book a consultation