RADCONSULTING
ARCHITECTURE & CONSULTING · CRITICAL INFRASTRUCTURE & ENERGY ASSETS

OT security architecture
for Australian energy assets.

Zone-and-conduit design to IEC 62443, plant data and machine learning that respect the boundary, and the drawings to show for it. Melbourne-based, one named principal, nineteen years in infrastructure.

OT/ICS · IIOT · AIOT · MLOPS · INDUSTRY 4.0
Book a discovery callSee how a design earns sign-off
19 years
architecting critical infrastructure
15+ years
across energy generation
Vendor-neutral
no resale, no channel margin
RAD-A-001 — Purdue reference architecture for an Australian utilityFour zones from the physical asset up to enterprise planning, separated by a defended IT/OT boundary at level 3.5, with two controlled conduits crossing it.
Fig. 1One architecture, plant floor to boardroom. The dashed line is where most of our work happens.
Read this drawing as text
  1. L4/5 — Enterprise & planning. ERP, work management and resource management: the systems the business runs on.
  2. L3.5 — Operational data & intelligence. Historians, industrial IoT and machine-learning models, sitting above the boundary.
  3. The IT/OT boundary, defended. Two brokered conduits cross it and nothing else does. No inbound sessions reach the control network.
  4. L1–3 — Control systems. SCADA, HMI and the PLC and RTU estate.
  5. L0 — Physical asset. Sensors, actuators and the plant itself.
COALGASHYDROWINDSOLARBATTERY STORAGE (BESS)OIL & PIPELINES
WHY IT MATTERS

Critical infrastructure faces nation-state adversaries. Change windows are measured in months, systems run for decades, and failure is a public-safety event, not a metric. Theoretical security does not stop determined attackers. Architecture endures only when it has been stressed, attacked, and proven. We design for operational reality, because when the grid goes down, diagrams don't help.

CAPABILITIES

What we do

Architecture and consulting for critical infrastructure and energy assets, across six disciplines. One standard applies to all of them: it holds, or it goes back on the board.

OT / ICSControl-system and SCADA architecture. Purdue-aligned segmentation, IEC 62443 zoning, and disaster recovery for systems where downtime is a public-safety incident.IIoTIndustrial IoT that connects plant to enterprise. Sensors, historians, and operational data platforms that move the data without dissolving the security boundary.AIoTIntelligence at the edge of the network. AI on live operational data, architected to inform decisions on the asset without opening new attack paths.MLOpsMachine learning put to work on the asset: predictive maintenance, performance optimisation, and diagnostics. Model pipelines versioned, monitored, and governed like any other critical system.Industry 4.0Convergence programmes that modernise energy assets. Digital twins, smart-plant integration, and IT/OT alignment from the plant floor to the boardroom.ERP & Enterprise SystemsThe systems work runs on: ERP, work management, and resource and asset management, integrated with the operational estate so plant and enterprise read from one truth.
APPLIED ACROSS COAL · GAS · HYDRO · WIND · SOLAR · BATTERY STORAGE (BESS) · OIL & PIPELINES

Put your architecture through fire.

A 30-minute discovery call: your environment, your constraints, and whether we're the right fit. No deck, no pitch.

Book a discovery call