Skill UI

Designs and implements IEC 62443-3-2 security zones and conduits for OT networks, covering risk-based partitioning, SL-T assignment, industrial firewall microsegmentation, and validation through traffic analysis and penetration testing aligned with the Purdue Reference Model.

Guides cybersecurity assessments tailored to oil and gas facilities, covering SCADA, DCS, SIS, remote RTUs, and compliance with API 1164, TSA Pipeline Security Directives, IEC 62443, and the NIST CSF across upstream, midstream, and downstream operations.

Guides the construction of secure remote connections to OT/ICS networks, covering DMZ jump-server architecture, privileged access controls, vendor gateways, session recording, MFA, and compliance with IEC 62443 and NERC CIP-005 expectations.

Defines an IEC 62443-compliant conduit and workflow for OT remote access, combining DMZ jump servers, MFA gateways, session recording, and approval flows so vendors and engineers manage ICS without touching OT networks directly.