OT cybersecurity
Security programmes for SCADA, PPCs and substation systems, built on IEC 62443 — zones and conduits, hardening, and incident readiness.
IT · OT · Renewables · Compliance
Secure, compliant technology for renewable energy.
genuinasterisk is an independent consultancy for the IT and OT systems behind solar, wind and storage assets — from plant networks and control systems to cybersecurity and regulatory compliance.
ITOT
Corporate IT and plant control systems were built by different teams, to different rules. Most of the risk in a renewable portfolio sits in the gap between them. That gap is where we work.
Services
Six arms, one point of view
Each service stands on its own, and they all connect at the centre: assets that are reliable, secure and compliant.
IT/OT network architecture
Plant and fleet networks designed for availability and segmentation — from field devices and substations to the control room and the cloud.
Regulatory compliance
Readiness for NIS2 and sector requirements: gap analysis, policies, evidence and a roadmap your auditors and board can follow.
Audits & risk assessments
Independent reviews of sites and portfolios: asset inventories, vulnerability and risk assessments, and clear, prioritised findings.
Monitoring & remote access
Secure remote access for O&M teams and vendors, and monitoring that turns plant telemetry and logs into early warnings.
Technical due diligence
IT and OT due diligence for acquisitions and financing — what you are really buying, what it will cost to fix, and how long it takes.
Standards
Frameworks we work with
We translate standards into decisions that fit the reality of an operating plant.
- NIS2
- IEC 62443
- ISO/IEC 27001
- IEC 61850
- IEC 62351
- GDPR
Approach
From first site visit to lasting assurance
- 01
Assess
Map the assets, networks and obligations as they really are — on site, not just on paper.
- 02
Design
Define the target architecture and controls, sized to the risk and to the budget.
- 03
Implement
Work alongside your teams, EPCs and vendors so changes land without disrupting generation.
- 04
Assure
Keep the evidence current, test controls regularly and stay ready for the next audit.
Clients
Who we work with
In any text, the asterisk marks the note that tells you what the headline left out. We play that role for the people who build, run and fund renewable assets.
- Asset owners & IPPsPortfolio security and compliance
- EPC contractorsSecure-by-design plant handover
- O&M providersRemote access and monitoring
- Investors & lendersTechnical due diligence
Contact
Let's talk about your assets.
Tell us about your portfolio and what you need to secure, comply with or decide. We reply within two working days.
Based inPortugal — working across Europe