OT Cybersecurity for New Construction

Moving the Starting Point for Cyber

Cybersecurity has often been overlooked during new construction and major modernization projects. While it may be occasionally discussed in capital committee meetings, rigorous cyber requirements and methodologies are rarely applied.

Black & Veatch’s Cyber Asset Lifecycle Management (CALM) services elevate the importance of cybersecurity throughout all phases of construction projects, focusing on two key dimensions: capability development and clean build.

Capability development focuses on engineering cyber into the design of an asset and building in the right technologies, processes, and concepts to optimize the asset’s cyber posture.
Clean build refers to minimizing the introduction of vulnerabilities and exploits during construction, ensuring a clean handover and the integration of an asset into ongoing cyber programs.

CALM solutions incorporate principles from key cyber concepts, such as Cyber-Informed Engineering (CIE), Zero Trust, Security-by-Design and Supply Chain Cyber Risk Management, among others, to provide methodologies and guidance throughout the planning, design, construction, and commissioning process.

Complete Services for New Construction and Major Modernization

Building cyber in from the beginning of the project significantly decreases the total cost of cybersecurity implementation and optimizes the efficacy of the solutions, processes, and concepts deployed. For example, segmenting a network, a core requirement for cybersecurity, could be factored in easier and more cost-effectively if done during the construction phase. Implementing network segmentation at ongoing operations can require network redesign, reconfigurations, and additional requirements that can result in additional investments, inefficiencies, and turnarounds.

Involves planning and organization of key elements before moving into the design or implementation phase. It ensures a thoughtful and well-prepared approach to the subsequent project stages.

Cyber Requirements Scoping
Capital Improvement Program Planning
Cyber Strategic Planning
Cyber Feasibility
Governance and Regulation Planning

The design phase includes technical consulting where our industrial cybersecurity experts work with architects, engineers, and other specialists to develop detailed plans and specifications for the project, pulling cybersecurity needs through the design steps to ensure a seamless cyber approach. This may include determining the cyber technologies and equipment needed, providing technical expertise on requirements and regulations, and offering advice on implementation methods and best practices. Black & Veatch plays a crucial role in ensuring the design phase is thorough, practical, and in compliance with industry standards.

Security-by-Design
Third-Party Cyber Design Review
Supplier Selection Support

During the construction phase, the project's designs and plans are transformed into a working product. This phase involves the build-out of the plans, meeting schedule requirements and project milestones, and the creation of the necessary components to bring the design to life. It's a crucial stage as it turns conceptual ideas into functional reality.

Technology Implementation
Segmentation
Hardening
Supply Chain Cyber Risk Management
Asset Management
Vulnerability Assessment
Cyber Quality Assurance
Cyber Acceptance Testing

The commissioning and delivery phase of a project is a critical stage that involves testing, verifying and fine-tuning all the systems and components to ensure they are functioning as designed and meeting the specified requirements. The commissioning phase also involves coordinating with various stakeholders to ensure that all the elements of the project are aligned and working together seamlessly.

Anomaly Detection

Cyber Handover