Practical OT risk screening built for manufacturing.
Indurevia evaluates overall cybersecurity readiness and specific risk conditions separately so an average score does not hide a potentially consequential weakness.
Assessment model
The assessment contains 25 questions across seven domains: Governance & Ownership; Asset Visibility & Criticality; Network Architecture & Access; System & Account Protection; Monitoring & Detection; Incident Response; and Backup, Recovery & Resilience.
Deterministic scoring
Responses are scored using fixed rules. The application calculates readiness, domain results, finding severity, risk conditions, risk status, and priority ranking deterministically. AI does not determine these numerical or categorical outputs.
Readiness and critical risk
Readiness measures the breadth and maturity of practices across the assessment. Critical Risk Status evaluates whether specific weaknesses or combinations of weaknesses create heightened exposure. The two outputs are intentionally independent.
Framework alignment
The assessment is informed by established OT cybersecurity practices and concepts found in NIST Cybersecurity Framework 2.0, NIST SP 800-82, CISA Cross-Sector Cybersecurity Performance Goals, and selected IEC 62443 concepts. Indurevia is not affiliated with or endorsed by these organizations or standards bodies.
Limitations
Free assessment results are self-reported unless separately validated. The assessment is a screening and prioritization tool and does not establish regulatory compliance or system security.