Legacy system cyber security hardening
The challenge
An industrial facility runs critical SCADA systems on unpatched Windows XP and Server 2003. The systems were designed to be isolated from other networks, but operations now need remote access, which creates serious cyber exposure.
What it aims to achieve
Safe remote access to legacy control systems, a clear upgrade path the facility can fund in stages, and a security posture that is checked continuously rather than once.
Related area: Industrial systems, cyber security and AI →
Our approach
Assessment
- Inventory of PLCs, RTUs, servers, software versions and network architecture
- Stakeholder interviews to find vulnerabilities and operational pain points
Tiered hardening plan
- Foundational options: network segmentation and operating-system upgrades
- Transformational options: a new SCADA platform and secure mobile access
Phased implementation
- Firewalls and a DMZ to separate IT from OT networks
- Server virtualization for fault tolerance
- High-availability architecture
Continuous protection
- Ongoing vulnerability monitoring and patch management
- Periodic security posture assessments