Energy, Utility and Critical Infrastructure Security Consulting
Independent security assessments and programs for substations, transmission, remote sites and the facilities that keep service running.
- 1Control house door and key box
- 2Gate lock and access log
- 3Spare transformer and copper yard
- 4Perimeter signage and lighting
Remote sites, long perimeters, high consequences
When a utility or critical site is hit, the cost is outages and public trust, not just stolen equipment. We help you prioritize the sites and controls that matter most.
- Remote substations and yards that nobody checks between visits
- Copper and equipment theft that interrupts service
- Contractor crews on site with no record of who is there
- Alarms and cameras without a clear response plan
- Security requirements that never reach the contractors doing the work
What we bring to your organization
Threat, vulnerability and risk assessment
TVRAs for substations, remote sites and operations facilities, ranked by consequence.
Awareness training
Short sessions for field crews and dispatchers on spotting, reporting and responding to security problems.
Program leadership
A fractional security director to own the program, the standards and the follow-through.
Remote site prioritization
Rank your sites by consequence, so budget goes to the places that matter most first.
Alarm and response planning
Who gets the alarm, who responds and how fast, written down and tested.
Contractor and key control
Access rules and key tracking for the crews and vendors who work at your sites.
When a critical site is hit, the cost is service and trust
Utilities and critical infrastructure owners manage many sites spread across long distances, most of them unstaffed. Theft, vandalism or intrusion at a single site can interrupt service, put crews at risk and draw regulators and the press. The hard part is deciding where to invest first.
We help you rank sites by consequence, set consistent minimums and make sure alarms lead to a real response.
From first call to a plan you can act on
A senior security leader leads every step. No pricing surprises: we scope the work with you before anything starts.
- Scoping callYour sites, critical assets and the decisions the work should support.
- Document reviewSite lists, incident history, standards and response procedures.
- Site visits and interviewsA representative set of sites, plus operations and response staff.
- Scoring and roadmapSites and risks ranked by consequence, with a phased plan.
Utility and critical infrastructure FAQ
Can you help us decide which sites to protect first?
Yes. A TVRA scores threats, vulnerabilities and consequences across your sites so you can invest in order of risk.
Do you handle NERC CIP-014?
We work alongside your compliance team on physical security risk and planning. We don't perform the third-party verifications the standard requires.
Do you do cybersecurity?
No. We focus on physical security: sites, people and response. We coordinate with your cyber team where the two meet.
Do you sell equipment or monitoring?
No. We're independent, so recommendations aren't tied to a product or a monitoring contract.