Services

Services for Critical Infrastructure Security and Resilience

Systems Risk Advisory helps utilities and critical infrastructure organizations assess risk, strengthen security, prepare for disruption, and test response readiness across cyber, physical, OT/ICS, and operational environments.

Discuss Your Needs Find the Right Service

A simple path for improving readiness

Most organizations do not need every service at once. Start where the pressure is greatest, then build a practical improvement path.

Assess Risk

Understand exposure, dependencies, and what could affect essential service.

Risk & Resilience Assessments Identify what could disrupt essential service and what should be addressed first. Cybersecurity Assessments Review accounts, MFA, remote access, backups, vendors, policies, and incident readiness. OT/ICS & SCADA Security Review SCADA access, control networks, vendor pathways, segmentation, and recovery limits. Physical Security Review facilities, remote sites, access control, cameras, alarms, locks, and critical assets.

Which service do you need?

Use these common starting points to choose the best next page.

If your AWIA deadline is approaching: Start with Risk & Resilience Assessments and Emergency Response Planning.
If you are concerned about SCADA, remote access, or vendors: Start with OT/ICS & SCADA Security.
If leadership wants a clear cyber risk picture: Start with Cybersecurity Assessments.
If you have remote sites, chemical areas, gates, locks, cameras, or control rooms: Start with Physical Security.
If you are worried about ransomware or cyber incident coordination: Start with Incident Response Planning.
If you have plans but have not tested them: Start with Tabletop & Operational Exercises.
If you need a broad continuity and dependency review: Start with Risk & Resilience Assessments.

Featured Service

Cybersecurity, physical security, OT/ICS, emergency response, continuity, and recovery are connected. Systems Risk Advisory helps infrastructure organizations identify what must keep working, where dependencies are fragile, and which practical improvements should come first.

Risk & Resilience Assessments Request a Consultation
  • Critical functions and operational dependencies
  • Cyber, physical, OT, vendor, and staffing risks
  • Continuity, communications, and recovery priorities
  • Leadership briefings and prioritized action plans

How engagements work

Each engagement is designed to produce useful findings, clear priorities, and recommendations that fit the operating environment.

Understand

Clarify facilities, systems, people, vendors, critical functions, and operating constraints.

Review

Assess risk, current practices, plans, controls, dependencies, and readiness gaps.

Prioritize

Identify what matters most, what can be addressed quickly, and what needs planning or budget.

Improve

Deliver practical recommendations, brief leadership, and support next steps where needed.

Common engagement packages

These packages help organizations start with a defined scope. Each can be tailored to the size, sector, and urgency of the organization.

AWIA Readiness Package

For water systems preparing to update Risk and Resilience Assessments and Emergency Response Plans.

  • RRA update support
  • ERP update support
  • Cyber, physical, and OT inputs
  • Optional tabletop exercise

OT/SCADA Exposure Review

For utilities and industrial organizations concerned about control system access and exposure.

  • Remote access review
  • Vendor access review
  • Segmentation and pathway review
  • Recovery readiness review

Cyber Readiness Assessment

For organizations that need a practical view of cyber risk and immediate improvement priorities.

  • MFA and account review
  • Backup and recovery review
  • Policy and procedure review
  • Incident readiness review

Physical Security Review

For organizations with facilities, remote sites, critical equipment, chemical areas, or access concerns.

  • Perimeter and access review
  • Locks, gates, cameras, alarms, and lighting
  • Control rooms and critical assets
  • Prioritized improvement plan

Exercise & Readiness Package

For organizations that need to test plans, roles, decision-making, and recovery priorities.

  • Scenario design
  • Exercise facilitation
  • Hotwash and observations
  • After-action report and improvement plan

Leadership Briefing

For boards, councils, executives, and leadership teams that need a clear risk and resilience discussion.

  • Plain-language risk briefing
  • Sector-specific examples
  • Priority decisions
  • Next-step recommendations

Start with a service page, or use a practical download to begin a readiness discussion with your team.

Volume 1 Companion Toolkit

Worksheets for remote access, passwords, MFA, and account security from the 15-Minute Cybersecurity Fixes series.

Download the toolkit

Water & Wastewater

Cybersecurity, physical security, AWIA, OT/ICS, incident response, and resilience support for water and wastewater utilities.

View water services

Books & Practical Guides

Plain-language cybersecurity guides for water, wastewater, and critical infrastructure leaders, including the 15-Minute Cybersecurity Fixes series.

View the books

Not sure where to start?

Start with a short readiness discussion. We can help identify the right first step based on your sector, risks, deadlines, and operational concerns.

Schedule a Consultation