Programme pilote : 30 % de remise la première année. Places limitées. Voir les conditions

Convenir d’un premier entretien
Complass – Navigate compliance Complass – Navigate compliance
Langue FR
Deutsch English Français Italiano Español Nederlands Polski Português
Essayer gratuitement

Sécurité OT

Sécurité OT : Les zones et conduits selon IEC 62443 sont au cœur de Complass

Tuesday, shift change

The network plan on the wall has been out of date since the last rebuild. The colleague from maintenance knows the real state.

In Complass the plan is your inventory. Change a zone and the plan changes with it.

Demander une démo Essayer gratuitement
Plan réseau par niveaux de Purdue avec les zones et conduits de l’entreprise de démonstration
Network plan in Complass (demo data)

Your plant as a plan, straight from the data

You create zones and conduits once. Complass draws the network plan by Purdue levels from them.

  • Every conduit carries rules for transport, port and direction.
  • Complass classifies recorded connections: allowed, deviation or violation.
  • Exceptions carry a reason and expire.
  • You take the plan along as PDF or SVG and the data as a spreadsheet.
  1. 5Entreprise/internet/cloud
  2. 4Informatique d’entreprise/ERP
  3. 3.5DMZ industrielle
  4. 3Gestion des opérations/MES/historien
  5. 2Supervision/IHM/SCADA
  6. 1Contrôle de base/automate
  7. 0Processus/équipements de terrain
The Purdue levels as Complass keeps them. Conduits connect the zones in between.

Security levels

Target, achieved and gap per zone

You set the target per foundational requirement. Complass works out what your components bring.

SL-T
Your target per zone and foundational requirement.
SL-C
What an asset can do, with its source: vendor statement, certificate or own assessment.
SL-A
The lowest SL-C value of the assets in operation. If a rating is missing, the field stays open.

Security levels are part of the IEC 62443 framework.

Page zones and conduits with key figures on zones, violations and SL gaps and the network plan, demo data

Remote access

Whoever comes in from outside is in the register

Supplier, access path, second factor, four-eyes approval and expiry sit in one place per access. Complass reminds you of the review.

Part of supplier management

Register of remote maintenance accesses with supplier, access path, status and expiry, demo data

Complass looks at your zones before an auditor does

Does the partitioning fit what sits in the zone? Complass checks this per IEC 62443-3-2 and gives hints. You turn every hint directly into a measure.

  • Safety next to other systems

    Safety functions share a zone with other assets, and the zone is not designated accordingly.

    ZCR 3.3

  • Wireless and temporarily connected devices

    Such devices sit next to other assets. Complass recognizes them by name and model; you tick off a wrong hit with a reason.

    ZCR 3.4, 3.5

  • Remote access in the zone

    Direct access, VPN or internet next to other assets. The route through a jump host does not count.

    ZCR 3.6

  • IT and OT mixed

    Business IT and control systems sit in the same zone.

    ZCR 3.2

You create the report “Security requirements of the zone” as PDF or Word and file it as evidence in the IEC 62443 project.

The inventory comes from your OT tools

Your OT monitoring already knows the devices. Complass takes them over instead of someone typing them in.

  1. Your OT tool

    Stays where it is and keeps its credentials.

  2. Relay script in your network

    A readable script. It reads the inventory and only sends outbound.

  3. Complass

    Turns it into assets with their origin. A person reviews new devices first.

  • Nozomi
  • Tenable OT
  • Claroty CTD
  • Defender for IoT

What arrives: Devices with vendor, model, firmware, serial number, addresses and Purdue level, as far as your tool delivers them.

What does not arrive: Alerts, traffic, vulnerabilities, risk scores and credentials. The script does not even ask for them.

How far this is tested: The connections follow the vendors’ interfaces; they have not yet run against a real plant. A dry run shows what you would get before the first sync, and uploads nothing.

OT assets with vendor, firmware and end of support in Complass, demo data

IEC 62443 for every role

Asset owners, integrators and manufacturers have different jobs. That is why Complass keeps the standard in three frameworks.

Bundle Industrie

  • IEC 62443 pour les exploitants, les intégrateurs et les fabricants
  • Règlement Machines avec les exigences de cybersécurité applicables aux commandes
  • Gestion des actifs pour l’IT et l’OT
  • MITRE ATT&CK pour Enterprise et ICS

All prices are on the packages page. No sales call needed.

To the packages

Questions fréquentes

Is Complass only for industry?

No. Complass is built for every sector. OT is where we go particularly deep. You run your office IT under ISO 27001 and your company under NIS2 in the same account.

Does Complass replace our OT monitoring?

No. Complass does not listen on the network and does not scan plants. It takes the inventory from your tool and turns it into your evidence.

Does Complass need access to our OT network?

No. The relay script runs on your side and only opens outbound connections. The credentials of your tool stay with you; Complass holds only a key that can do nothing but upload.

Does this work without an OT tool?

Yes. You take over assets from spreadsheets or CSV, including zone and Purdue level, or create them by hand.

A plan instead of the drawing on the wall

In the demo we show you zones, conduits and security levels at a sample plant and work out which tools suit you.

Demander une démo Essayer gratuitement