OT Cybersecurity Assessments

Fixed-scope, structured assessment. Not open-ended consulting. Start with a Critical Controls Assessment or proceed directly to a Full Assessment. Final fee confirmed after scoping.

Focused assessment. Fixed fee.
OT Defensibility Assessment (Critical Controls)A focused assessment of the most critical OT cybersecurity controls, designed to determine whether your current position can be clearly defined and defended. The process requires structured evidence against each control, exposing gaps, clarifying documentation, and establishing a coherent, defensible baseline.
Fixed fee applies toSingle OT site. Up to 3 distinct OT systems or platforms. No group-level or multi-site complexity. Confirmed at scoping call.
  • ✓74 questions across critical control domains
  • ✓Covers 34–37 ENISA requirements
  • ✓RAG scorecard — Red / Amber / Green by domain
  • ✓Identifies your highest-risk gaps fast
  • ✓Delivered within 5 working days
  • ✓Fee creditable against full assessment
Fixed fee£1,500–£2,500Fee credited against Full Assessment if you proceed
Request AssessmentScope and eligibility confirmed at the scoping call. Sites outside eligibility criteria are directed to the Full Assessment.
Full Assessment — choose your scope
NIS2 Article 20Senior management is personally liable for OT cybersecurity failures under NIS2.An OTVerdict assessment provides a structured and defensible representation of the steps taken, suitable for presentation to regulators, insurers, or boards when scrutiny occurs. It documents what controls were in place, what evidence was assessed, and where gaps were identified.
Single Site1 site, up to 3 OT systems£4,000–£6,000
  • •Single OT site assessed
  • •All 15 control domains covered
  • •Gap report with prioritised remediation actions
  • •Evidence pack mapped to NIS2 Articles and ENISA requirements
  • •Delivered within agreed timeline confirmed at scoping
Request a Scope Call
Most common
Multi-Site1 to 3 sites, multiple OT systems£6,000–£8,000
  • •1 to 3 OT sites assessed
  • •All 15 control domains covered
  • •Gap report with prioritised remediation actions
  • •Evidence pack mapped to NIS2 Articles and ENISA requirements
  • •Delivered within agreed timeline confirmed at scoping
Request a Scope Call
Large Estate4 or more sites, or full group-level OT estate£8,000–£12,000
  • •4 or more sites or full group-level OT estate
  • •All 15 control domains covered
  • •Gap report with prioritised remediation actions
  • •Evidence pack mapped to NIS2 Articles and ENISA requirements
  • •Delivered within agreed timeline confirmed at scoping
Request a Scope Call
Not sure which tier?Tier selection is based on the number of OT sites in scope and the number of distinct OT systems being assessed. Where scope is borderline, confirm at the scoping call. Final fee is always agreed before any commitment is made.Book a scoping call

Final fee confirmed after scoping. Indicative range only. 50% invoiced upfront, 50% on report delivery.