Capability
ICS cyber securityto IEC 62443.
ATG connects plants to the enterprise for a living — so we design the segmentation, the DMZ and the remote-access controls first. The security work is done by the engineers who understand what the control system must keep doing while it is protected.
Connect the plant. Don't expose it.
What ATG delivers
Scope we takeunder our own contract.
- Purdue-aligned zoning and conduits, industrial DMZ and firewall pair design for DCS, SIS and SCADA networks.
- Managed area switching with ring or dual-homed uplinks, OT core switching and network documentation.
- System hardening — accounts, patching regime, application whitelisting, removable-media control, backup and restore.
- Secure remote access for vendors and ATG support with session control and logging.
- IEC 62443 gap assessment, risk assessment and remediation plans for operating plants.
- Monitoring and asset inventory for the OT network, integrated with the client's IT security operations.
Platforms and vendors supported
- IEC 62443 zones and conduits
- Industrial firewalls and DMZ (client-standard vendors)
- Managed industrial Ethernet
- OPC UA and MQTT boundary architecture
- Backup and recovery tooling
Standards applied
- IEC 62443-2-1 / 3-2 / 3-3
- NIST SP 800-82
- Saudi Aramco SAEP and client OT security standards where specified
Typical scope of work
From the first meetingto the handover dossier.
Connect the plant. Don't expose it.
- AssessAsset inventory, network mapping, IEC 62443 gap and risk assessment.
- DesignZones and conduits, DMZ, firewall rules, remote access, hardening baselines.
- ImplementNetwork build, firewall configuration, hardening, backup regime, documentation.
- SustainMonitoring, patch management support, periodic reassessment.
Where we work
Al-Khobar to Yanbu,and on rotation worldwide.
Kingdom of Saudi Arabia
Own Saudi entity and employer file; established mobilisation to Al-Khobar, Dammam, Jubail, Yanbu, Jeddah, Rabigh, Riyadh. Works under the client or plant project insurance.
International
Engineering and commissioning teams under long- and short-form agreements — residential, rotational and offshore — supported from Al-Khobar and Lahore.
Related projects
Claim,then evidence.
Plant-wide OT/IT integration and production data platform
Frequently asked
Questions buyers askbefore the shortlist.
Do you replace our IT security team?
No. We design and build the OT side — segmentation, DMZ, hardening and secure access — and hand a documented boundary to your IT security operations.
Can you secure a plant without stopping it?
Yes. Segmentation and DMZ work is planned around operating windows with tested rollback, in the same way as our live-plant migrations.
Digitalisation, OEE & IIoT
Plant data concentration, historian, OEE and KPI dashboards, ERP interfaces — over a segmented network.
One plant, one set of numbers.Read more →PLC, HMI & SCADA
Siemens, Rockwell, Schneider, ABB and Mitsubishi with WinCC, AVEVA, FactoryTalk and zenon — machine to plant.
Small plants deserve serious engineering.Read more →Distributed Control Systems
Yokogawa, Emerson, Honeywell, Siemens, ABB and Foxboro — design, configuration, FAT, commissioning and support.
Large process. Zero surprises.Read more →Start a conversation
Tell us whatyou need built.
Send the scope, the P&IDs or just the problem. A control-systems engineer — not a sales desk — replies from Al-Khobar, normally within one working day.
Al-Khobar head office
+966 59 350 1825 · +966 53 849 2308Proposals sales@atgpa.com
General inquiries@atgpa.com
Technical support techsupport@atgpa.com