Services

Physical & cyber penetration testing

Test the effectiveness of your physical security and cybersecurity defenses, separately or together, with a defined scope and agreed rules of engagement.

Physical penetration testing: Test facility access controls, physical barriers, and security procedures through realistic, agreed scenarios.

Cyber penetration testing: Test networks, applications, and systems to identify exploitable weaknesses and understand their impact.

Our expertise in both disciplines helps reveal how a physical weakness can create a cyber opportunity, or a cyber compromise can undermine physical protection.

Security assessments

Understand your physical security and cybersecurity risks, and prioritize improvements across your facilities, systems, and processes.

Physical security assessments: Evaluate safeguards for your facilities and personnel, including physical access controls and security procedures.

Cybersecurity assessments: Examine networks, systems, configurations, and security controls to identify vulnerabilities and gaps in your defenses.

Incident response & digital forensics

Investigate security incidents, examine digital evidence, and identify steps to contain the impact and support recovery.

Security engineering

Integrate security into architecture and system design, implementation, software development, and remediation.

Regulatory & compliance services

Our work covers U.S. and European Union security frameworks and regulatory requirements, as well as nuclear cybersecurity and physical security worldwide. We support commercial organizations and government agencies with work scoped to their systems, operations, and applicable requirements.

Our services connect requirements with implementation:

• Assess existing controls and identify gaps against relevant requirements.
• Develop security policies, procedures, and supporting documentation.
• Prepare for assessments and inspections, and address findings.
• Prioritize remediation and strengthen ongoing security programs.

Our team brings direct experience developing regulations and guidance, designing inspection programs, conducting inspections, and enforcing requirements.

Areas we support

• Nuclear cybersecurity and physical security: Global support for nuclear security programs, assessments, regulatory documentation, and inspection readiness. Our experience includes the United States, the European Union, Korea, Japan, and the United Arab Emirates.
• NERC CIP: Support for the Critical Infrastructure Protection standards, connecting cybersecurity, physical security, program documentation, and readiness for compliance assessments.
• EU cybersecurity and resilience: Support for NIS2, the Critical Entities Resilience (CER) Directive, and applicable national implementing requirements.
• Federal FISMA services: Dedicated support for federal information security programs, including assessments, documentation, and risk management.

Each engagement is tailored to the requirements that apply to your organization, facilities, and systems.