Redguard AG - OT Security

The digitalization of industrial processes is accelerating through the interconnection of OT and IT systems. This enables efficiency gains but also poses significant cyber risks. Production downtime, sabotage, and the theft of sensitive data are potential consequences of inadequate OT security. Therefore, a robust security strategy is essential to ensure the integrity and availability of industrial systems and to protect human safety.

Security specialists from both worlds: IT and OT

In the increasingly connected world of industry, we believe that effective OT security requires expertise from two worlds: Information Technology (IT) and Operational Technology (OT). That’s why our team combines experts with extensive experience in both fields.

This approach enables us to develop holistic security solutions specifically tailored to the needs of your industrial environment. Comprehensive knowledge and years of experience ensure that our team understands the specifics of manufacturing companies, energy providers, railway organizations, and other critical infrastructures from organizational, technical, and cultural perspectives.

Familiar with the challenges of OT security

Thanks to our industry specialists, we understand the challenges of the OT sector and know how to support you pragmatically and holistically.

Selected references on the topic

«Redguard is absolutely trustworthy and competent. You are understood by your counterpart and receive knowledgeable answers to all technical questions. The customer’s needs are respected and subsequently implemented. That makes cooperation meaningful and enjoyable. Security is becoming increasingly important, which is why it’s essential for us to have our organization independently reviewed. An attack simulation is perfectly suited for this.»

Christian Schollenberger, Head of IT

«In terms of security, we need an external critical perspective. The four-eyes principle is indispensable. This includes not only a focus on the product but also a review of our working methods.»

Patrik Eigenmann, Chief Engineer responsible for the new product at dormakaba

«We are very glad we chose Redguard. The consultants were able to quickly adapt to the conditions of a pragmatically operating SME and delivered the results we expected with a reasonable effort for all parties involved.»

Dr. Marcel Schmid, Head of Projects and IT at Truffer AG

«The collaboration worked excellently from the start, and requests were always taken into account. There was continuous exchange between the testers and the project managers throughout the project.»

Jérémy Singy

«Information security is a key success factor in ensuring that we can achieve our water and power supply goals and responsibilities in the long term and with minimal interruptions. That’s why we’ve anchored information security as a strategic issue and implemented the ICT Minimum Standard with the support of Redguard.»

Roberto Romano, Managing Director EW Rothrist

«The collaboration went well because Redguard’s security testers explained all concerns and questions and addressed our individual needs.»

Patrik Schlegel, Municipal Clerk of Vilters-Wangs

«Due to increasing cyberattacks, we wanted to have our IT infrastructure and processes independently reviewed. Thanks to the pragmatic approach and recommended actions, we were able to implement the first measures in a short time.»

Claudia Schraner, Municipal Clerk Wittnau

«The entire campaign with the fictional security mascot James was a great success.»

Urs Fuchser, IT Security Architect at BLS AG

Popular with our clients

Request offer

ICT Minimum Standard

Structured determination of the organization's current information security situation according to the ICT Minimum Standard or another standard. Analysis and identification of potential improvements and derivation of concrete measures to achieve these, including their prioritization.

Learn more

Attack Simulation

With our simulations (Attack Simulation, Red Teaming, and Purple Teaming), we comprehensively test your organization’s resilience against cyberattacks. An attack simulation replicates real cyberattacks to identify vulnerabilities and weaknesses in a system or network. In Red or Purple Teaming, the simulated attacker team works alone or in cooperation with the defense team to identify gaps in detection capabilities — and in the case of Purple Teaming, to close them as well.

Learn more

CISO Mandate / CISO as a Service

If you’re looking to advance your security efforts but currently lack sufficient management capacity, one of our experienced experts can step in as a (Chief) Information Security Officer on a mandate basis. They can serve as an interim solution until you find your permanent CISO or take on specific projects. Upon request, the CISO can also draw on additional Redguard resources to support specific projects.

Learn more

Risk & Threat Analysis IEC 62443-3-2

As part of the risk & threat analysis based on IEC 62443-3-2, potential threats to the relevant component are identified and associated vulnerabilities assessed in a risk evaluation. Based on this evaluation, suitable protective measures are identified, recommended by us, and reviewed and implemented by the client. Upon request, components can be re-evaluated after implementation through a gap analysis to validate the effectiveness of the measures.

Incident Response (CSIRT)

Attack. During an incident, you can rely on the support of our digital forensics and incident response (DFIR) team. We ensure no valuable time is lost and minimize damage to your organization.

Learn more

Penetration Testing

Penetration testing is a technical security assessment in which we identify and evaluate vulnerabilities — within a defined scope such as networks, systems, and applications. This allows us to uncover complex security issues and recommend clear and effective countermeasures. We also help you securely deploy technologies such as containers and review the implementation. Additionally, we support you in testing the hardening of your systems (Windows, Linux, macOS) or your cloud infrastructure.

Learn more

Architecture Review

A Security Architecture Review (SAR) helps identify weaknesses and potential for improvement in an IT architecture — ideally before implementation efforts are made. A Security Architecture Review can also be useful after implementation to identify weaknesses, particularly at interfaces and in the interaction of individual components.

Learn more

Security Awareness

Security awareness training presents a unique challenge in OT security, as many employees are often on the move and only access systems via mobile devices. It’s important to reach these groups appropriately and within their daily routines. Together with our partner KnowBe4, we offer mobile-optimized eLearning as well as supporting measures (e.g., live hacking demos, workshops, cardboard displays, posters, handouts, quiz booklets, screen savers, etc.).

Learn more

Business Continuity Management (BCM)

We support you in building and maintaining business continuity management (BCM) — from initial analysis to regular testing. This enables you to maintain your operations during a crisis or restore them quickly and fully afterwards.

Learn more

Active across all industries

With our many years of industry experience, we advise stakeholders from various sectors where OT security is relevant. Below are only the clients who have agreed to be featured on our website:

Energy Providers

Manufacturing Companies

Railway

Successful projects and references

Our references include, among others:

Long-term, holistic support for various Swiss railway companies
Ongoing support of regional electricity, gas, heat, and water providers within the framework of CISO mandates and implementation of measures
Long-term optimization of cybersecurity for manufacturing companies in the food sector as CISO
Conducting information security assessments at various regional energy providers, industrial companies, and railway organizations
Conducting penetration tests at various power suppliers, railway companies, and manufacturing businesses
Development of BCM concepts and emergency plans for availability-critical companies

Further references and success stories from the fields of energy supply, rail, and manufacturing can be found on our References page.

Understanding regulatory requirements

The regulatory requirements in the field of Operational Technology are as diverse as the industries themselves. Whether ICT Minimum Standard, Cyber Resilience Act, CySec Rail, NIS2, or IEC62443, we understand your specific challenges and, thanks to our in-depth industry knowledge, offer advice that makes a real difference.