Highlight
Critical Systems
Unauthorized access to SCADA, PLCs, RTUs and engineering workstations.
Nokta Guard tests IT and OT networks in these environments without disrupting operations and helps you prepare for expectations under EMRA (EPDK) rules and Cybersecurity Law No. 7545.
Common threats and systems
Highlight
IT and OT Separation
Weak segmentation allowing movement from corporate IT into OT.
Highlight
Remote Access and Suppliers
Intrusion via remote access and supplier connections.
Highlight
Operational Continuity
Operational outages caused by ransomware.
Relevant regulations
For energy companies, EMRA's Cybersecurity Competency Model Regulation and ICS Security Analysis and Testing Procedures are the core framework (EMRA Penetration Testing). Critical infrastructure operators should also review the Cybersecurity Law and Information and Communication Security Guide pages.
Recommended services
- ICS/OT penetration testing, prioritizing passive methods and coordinated with maintenance windows.
- IT–OT segmentation and remote access testing.
- Internal and external network penetration testing for corporate IT.
- Social engineering testing and cyber crisis exercises.
Frequently Asked Questions
Will OT penetration testing affect production?
We plan testing not to disrupt operations. Passive methods take priority on live systems; active tests run in maintenance windows or test environments.
Which regulations apply to energy companies?
EMRA's Cybersecurity Competency Model Regulation and ICS Security Analysis and Testing Procedures are the main rules. Organizations designated as critical infrastructure also have obligations under Cybersecurity Law No. 7545.
Are IT and OT tested separately?
They are usually planned as separate phases, but the most critical scenario is moving from IT into OT. We therefore design segmentation testing as the step that links both phases.