The main purpose of a Vulnerability Assessment is to identify the critical issues in an industrial system and the corresponding desirability in terms of potential cyber attacks.

Vulnerability assessments are part of a broader Cyber Security Risk Assessment process on an industrial control system. This is why our assessment service is based on the pillars of the IEC 62443 standard, from which we adopt the systematic method to manage cyber risk on industrial devices.

Our offer is structured on a complete range of consulting services according to the security lifecycle approach in conformity with the IEC 62443 standard requirements, which is structured into three macro-phases of work:

• Assessment
• Implementation
• Maintenance

The vulnerability assessment is performed in the assessment stage, which is based on the premise that before proceeding with the definition of any countermeasures, the system needs to be analyzed in detail.
The purpose of our vulnerability assessment service is precisely to establish the system’s size and composition in detail and, as a result, identify all the existing vulnerabilities, including their potential exposure to cyber attacks.

The complete assessment includes investigating human factors, often the main vehicle for vulnerability, passive and active scanning, and protocol or package parsing.

In addition to defining which parts of the infrastructure are the most critical, the vulnerability assessment prioritizes the actions to be taken, based on feasibility and the consequences for the business in the event of an attack, thereby paving the way for the implementation of corrective actions to protect industrial devices.