ConSL-T, ISA/IEC 62443 Implementation Workbench
Coming soon

ISA/IEC 62443, worked out for you.

ConSL-T takes any industrial or OT site from its first asset inventory to audit-ready deliverables. It derives the targets, judges the requirements, ranks the gaps and proposes the plan, and you have the final say on every answer.

See it work How it fits together

Works for any OT site. Five finished worked examples included: water, power, oil and gas, pharma and manufacturing.

From your plant to your deliverables
  1. Plant modelyou describe it
  2. Security targetsderived
  3. Requirementsjudged automatically
  4. Gaps and risksranked
  5. Mitigation planproposed
  6. Audit-ready documentsgenerated
Every automatic answer is marked. Edit any of them and yours wins.
The workflow

From inventory to audit, in one place

Each step feeds the next, so a change in the plant shows up everywhere it matters. Pick a step.

Automation

The automation does the heavy lifting

Most 62443 work is reading the plant and applying the standard's rules, again and again. ConSL-T does the reading, writes its answer, marks it as automatic, and leaves the final say with you. Open any row.

See it work

A few facts in, the expert work out

Tell ConSL-T what the plant looks like. It works out the targets, finds what falls short, and proposes what to do about it, with the reason written next to every answer.

1You describe the plant

A small water works

  • A vendor reaches the site through a remote-access gateway.
  • The historian and patch server sit in a DMZ behind it.
  • Plant control links to the DMZ, with no firewall recorded on that link.
  • A compromise of plant control could stop treatment.
2ConSL-T works it out

Targets, with their reasons

Remote accessSL-T 2
Connected straight to the internet.
Plant DMZSL-T 2
Right behind remote access, no firewall on the link.
Plant controlSL-T 3
Reachable from the internet without crossing a firewall, so its separation target goes up a level.
Network segmentation for plant control: not met. Nothing recorded separates it from the DMZ.
3You get the plan

What to do, and the paperwork

Proposed actionPut a firewall between the Plant DMZ and plant control.Closes the segmentation gap and takes plant control back off the internet's path.
Generated for you
Requirements specificationRisk reportGap reportAssessor pack

A simplified example to show the idea. Every automatic answer in ConSL-T is marked, and you can edit any of them.

Trust

Built to be trusted

01

Every answer shows its working

Any derived value traces back to the inputs and rules that produced it.

02

You have the last word

Automatic answers are marked, and a person's edit always wins.

03

Nothing quietly goes stale

When an input changes, every result that depended on it is flagged.

04

Your data stays with you

ConSL-T runs on your own machine. Your plant's details go nowhere.

Deliverables

Documents, generated from the work

Everything an assessment needs to hand over, produced from the assessment itself rather than written by hand.

Cybersecurity Requirements SpecificationFor every zone and conduit.
Risk and gap reportsIncluding the detailed risk assessment.
Executive dashboardPosture at a glance for management.
Assessor packPDF and HTML, ready for an auditor.
Sealed bundleTamper-evident, verifiable by the auditor.
Framework mappingISO 27001, NIST CSF 2.0, NIST SP 800-82.
Coming soon

Built for the people who have to make 62443 real.

ConSL-T is in final testing ahead of its first release.

Follow on GitHub