ORS Consulting's Privacy Policy outlines our commitment to protecting your personal information. Read our policy to learn how we collect, use, and secure your data. Trust us to safeguard your privacy. PRIVACY POLICY ORS Consulting is committed to respecting your privacy and we understand how important it is to protect an individual’s personal data and apply high ethical and regulatory standards to the processing of such data. This Privacy Policy explains the policies and practices that ORS Consulting has developed to safeguard personal data and comply with applicable data protection laws. What WE COLLECT (A) INFORMATION THAT WE COLLECT DIRECTLY FROM YOU ORS Consulting collects information directly from you when you choose to sign up to our newsletter and contact forms on our websites, call or e-mail us, or otherwise provide information directly to us. The following are examples of information we may collect directly from you: Name Contact details (e-mail address, telephone number, postal address, etc.) Business information, including employment history, education history, qualifications, occupation and areas of specialization. (B) INFORMATION WE COLLECT WHEN YOU VISIT OUR WEBSITES When you visit this website, we have access to the following types of information about you: IP address. We record the internet protocol (IP) address of your computer when you visit this website. The IP address does not identify you personally, but it allows us to maintain communications with you as you move about this website. HOW WE USE YOUR INFORMATION By providing your personal data, you agree that, where it is permitted by local law or where you have agreed to receive these communications from us, we may use the information: to respond to your requests; to improve our level of service; to improve the content of our communications; to provide you with tips, helpful information, product news and updates; to notify you of our new services; to seek your views on our services; to consider your application for employment; for our own administrative and quality assurance purposes; and for other purposes that may be detailed on this website. In using your personal data, we follow the following principles: (A) LIMITATION ORS Consulting will only collect personal data about you that is necessary for one or more of our legitimate business purposes or is required by law. In addition, ORS Consulting will only collect personal data by lawful and fair means and not in an unreasonably intrusive manner. (B) PURPOSE When ORS Consulting collects your personal data, we will take reasonable steps to advise you of what personal data we are collecting, the purposes for which we are collecting the information and will use such information only for stated primary or related secondary purposes. (C) DISCLOSURE ORS Consulting will advise you of the organizations (or types of organizations) to which we may normally disclose that personal data, and we will provide you with contact information in the event you would like access to your personal data we hold about you or need to update your personal data or preferences. (D) ACCURACY If you suppose that ORS Consulting may hold inaccurate information about you, please reach our contact: contact@ors-consulting.com (E) RIGHT TO BE FORGOTTEN If you execute a right to be forgotten, collected data (from our website) will be deleted from our system without any consequences for you. We may keep your information in case if it is located inside legally binding documents or backup files. COOKIES AND OTHER TECHNOLOGY ORS Consulting uses a variety of technologies to assess how our sites are used, to personalize your experience and to deliver online content tailored to your interests, such as internet tags and cookies. Cookies are small text files that are placed on your computer or other web-accessing devices by our websites. These cookies allow us to distinguish you from other users of this website and enhance your experience when you browse this website. For more information on cookies and other data collection technologies, please refer to our Policy about Cookies. HOW WE STORE INFORMATION AND YOUR RIGHTS We retain your personal data for no longer than is necessary for the purposes for which it has been collected. You may contact ORS Consulting at any time if you would like to access your Personal Data or require information about the Personal Data that we hold about you (such as the source of the Personal Data). You may object to the processing of your Personal Data for legitimate reasons, and you may also request the correction or erasure of it. Where ORS Consulting processes your personal data on the basis of your consent, you may withdraw your consent at any time without any prejudice to you by contacting us using the contact details below. This will not affect the processing of your data based on your consent previous to the point at which you withdraw consent. SECURITY ORS Consulting takes measures to ensure that your data collected from this website is securely processed and stored. We have implemented strong cyber security measures based on industry best practice. DATA TRANSFER TO THIRD COUNTRIES ORS may transfer information to third countries, including ORS Türkiye and to external service providers. ORS ensures that additional measures have been taken to make data transfers to third countries secure and provide an adequate level of protection. CONTACT US If you have any concerns about the manner in which your personal data has been collected or handled by ORS Consulting, or any queries in regard to this privacy statement or would like to exercise your rights as outlined above, you can contact contact@orsconsulting.no CHANGES IN OUR PRIVACY POLICY We will only use personal data in the manner described in the Privacy Policy in effect when the information was collected from you. However, we reserve the right to change the terms of this Privacy Policy at any time (for example due to changes in data protection laws) by posting revisions to this website. We will take adequate and reasonable action to obtain your consent if required, as a result of any such change. Updated: January 15, 2025 __________________________________________________________________ POLICY ABOUT COOKIES We use technologies on the site www.ors-consulting.com (the Site) to collect information that helps us improve your online experience. In this Cookie Policy, we refer to these technologies, which include cookies and pixels collectively as cookies. This policy explains the different types of cookies used on the Site and how you can control them. We may change this Cookie Policy at any time. Please take a look at the last effective date at the top of this page to see when this Cookie Policy was last revised. Any changes in this Cookie Policy will become effective when we make the revised Cookie Policy available on or through the Site. Any personal information that we collect through the use of cookies is obtained through transparent notice to you and through your consent. Where applicable, we provide you with the opportunity to opt out. WHAT IS A COOKIE? Cookies are small text files that are stored on your computer or mobile device. They are widely used in order to make websites work, or work in a better, more efficient way. They can do this because websites can read and write these files, enabling them to recognise you and remember important information that will make your use of a website more convenient (e.g. by remembering your user preferences). WHAT COOKIES DO WE USE? Below we list the different types of cookies we may use on the Site. PERFORMANCE COOKIES Performance cookies, which are sometimes called analytics cookies, collect information about your use of this Site and enable us to improve the way it works. For example, performance cookies show us which are the most frequently visited pages on the Site, allow us to see the overall patterns of usage on the Site, help us record any difficulties you have with the Site and show us whether our advertising is effective or not. PERFORMANCE COOKIES ON THIS SITE ARE: Google Tag Manager, Google Analytics, Google Search Console To enable website owners to track visitor behavior and measure site performance. To opt-out of Google Analytics and Google Tag Manager, please visit the Google Analytics site . Microsoft Clarity Heatmap to track visitor behavior and site performance. Targeting or Advertising Cookies Our service providers and we may use targeting or advertising cookies to deliver ads that we believe are more relevant to you and your interests. For example, we may use targeting or advertising cookies to limit the number of times you see the same ad on our Site and to help measure the effectiveness of our advertising campaigns. These cookies remember what you have looked at on the Site and we may share this information with other organizations, such as advertisers. TARGETING AND ADVERTISING COOKIES ON THIS SITE ARE: Google ADS Our service providers and we may use targeting or advertising cookies to deliver ads that we believe are more relevant to you and your interests. LINKS TO AND FROM EXTERNAL WEBSITES Our website contains links to external websites run by other organizations. This privacy policy applies only to our website and not to those external websites that we link to, which will have their own privacy policies. We are not responsible for these external websites and their privacy policies and practices. In addition, if you are linked to our website from an external site, we cannot be responsible for the privacy policies and practices of the owners and operators of that external website and recommend that you check the privacy policy of that external site. REFUSE TO ACCEPT COOKIES You may refuse to accept cookies from this Site at any time by activating the setting on your browser which allows you to refuse cookies. Please be aware that if cookies are disabled, not all features of the Site may operate as intended. Responsible Use of Artificial Intelligence ORS Consulting uses artificial intelligence (AI) tools to support the delivery of our engineering, risk and advisory services. We are committed to using AI responsibly, transparently and in line with applicable law. How we use AI We use AI to support our specialists in delivering our services. AI-assisted work is reviewed and validated by qualified ORS personnel before it informs any deliverable, and the professional judgement of our experts remains paramount. All communication with clients and the public is conducted by people, not AI. Our principles Human oversight - AI assists; people decide. Qualified staff review and validate AI-supported work. Transparency - we set out our approach in this public statement and confirm on request whether AI has contributed to a deliverable. Fairness - we take care to avoid unfair bias or discriminatory outcomes. Confidentiality and client data - we do not use AI tools that train on client data to improve publicly available AI systems, and we select AI services whose terms reflect this. Client data and confidential information remain subject to our confidentiality and data-protection obligations. Privacy and data protection - we handle personal data in accordance with applicable data protection laws and our privacy policies, and we limit what is shared with AI tools. AI processing may take place within or outside the EEA under the safeguards described in our Privacy Policy. Security - AI is used only through controlled, managed systems with appropriate safeguards. Accountability - ORS remains responsible for its work, whether or not AI was used to support it. AI-assisted meeting notes Where meetings or workshops are recorded or transcribed using AI, the resulting transcripts, summaries and notes are informal working materials only. They do not represent ORS's professional position - only written deliverables issued and signed by an authorized ORS representative do. How we manage AI responsibly We train our people in the responsible use of AI (AI literacy). We provide access to AI only through secure, approved platforms. We do not use AI for automated decisions about individuals or for uses classified as high-risk under the EU AI Act. Contact Questions about our use of AI can be sent to admin@ors-consulting.com . This statement applies to ORS business units. Last updated: 31/08/2026.

Since 2009, ORS Consulting has been a leading UK advisory firm in industrial risk management, supporting sectors like oil, gas, chemicals, renewables, defense, and transportation, with expertise in UK regulations and collaboration with HSE. LOCATIONS ORS CONSULTING IN United Kingdom ORS Consulting is a leading advisory firm in industrial risk management in the UK. Since 2009, we have supported clients across various sectors including oil and gas, downstream, chemicals, renewables, defense, and transportation. We have extensive experience with relevant UK regulations and in working with Government Regulators including the Health & Safety Executive (HSE). Some examples of ORS Consulting’s contributions over the past decade include: Supporting both operators and engineering companies with integrated risk advisory for major field developments and existing operating assets in the North Sea; Assisting industrial establishments with implementing a risk management framework according to governing regulations such as the Control of Major Accident Hazards (COMAH) Regulations; Conducting numerous risk analyses, including process-related reviews (e.g., HAZOPs), process safety times, uptime/availability, RAM studies, barrier management activities, Thorough Reviews, QRAs, SIL/Functional safety studies, and consequence modelling. Our dedicated process engineering and process safety team use HYSYS, UniSim and SLB's Symmetry to solve complex process performance issues. We opened our first office in Aberdeen in 2017 and in 2024, we expanded with a second office in Glasgow. In 2025, we expanded further with a new office in London. We are always looking for talented professionals to join our team and offices in the UK. Get in touch via our career page . Neill Renton Country Manager, ORS UK Sam Richardson Department Manager, ORS London Louis C. Findlay Department Manager, ORS Aberdeen Alessandro Capaldi Department Manager, ORS Glasgow ABERDEEN, UNITED KINGDOM Neill Renton | Country Manager T: +44 (0)1224-042882 M: +44 (0)7388-948667 nre@ors-consulting.com Louis C. Findlay | Department Manager lcf@ors-consulting.com Citibase Aberdeen Hill of Rubislaw, AB15 6BL Aberdeen, United Kingdom Registered in Scotland: SC541316 GLASGOW, UNITED KINGDOM Alessandro Capaldi | Department Manager T: +44 (0)1412-225930 aca@ors-consulting.com 126 West Regent Street, Glasgow G2 2RQ LONDON, UNITED KINGDOM Sam Richardson | Department Manager T: +44 (0) 7989 977 439 sar@ors-consulting.com 201 Borough High St, London SE1 1JA FIND OUT HOW WE CAN WORK TOGETHER CONTACT US

ORS is a leading provider of Process Safety and SIL. We are helping businesses and facilities with a wide range of services, including all lifecycles of functional safety management, HAZOPs, dynamic process simulations, process safety time assessments, and overpressure protection assessments. services Process Safety and SIL Up Anchor 1 Any process that handles hazardous substances has the potential for a loss of containment event that could lead to a significant incident. Asset owners need to ensure that the process equipment is designed, maintained, and operated to minimize the likelihood of this. Process Safety is a framework for ensuring that the process design envelope is protected and has resilience against system failures and degradation. Process safety consequently focuses on preventing or mitigating loss of containment scenarios that could lead to fires, explosions, and accidental chemical releases at process facilities. An important part of Process Safety is Functional Safety. The core of functional safety is about defining requirements for instrumented safety systems and so-called safety instrumented functions, which normally include an input device, logic solver, and a final element. ORS is a leading provider of Process Safety and SIL. We are helping businesses and facilities with a wide range of services, including all lifecycles of functional safety management, HAZOPs, dynamic process simulations, process safety time assessments and overpressure protection assessments. Process Safety and SIL ReLAted Studies HAZOP HAZOP is a structured, multi-discipline assessment of a process system to ensure that the risk for loss of containment is minimized and that the design meets process safety-related standards. Learn More> Dynamic Process Simulation Dynamic simulation of a process plant behaviour to better understand the effects of failures and the ability of the design to safely address these failures. Process Safety Time Assessment Ensuring that Safety Instrumented Systems can react within a suitable period following a process disturbance and avoid the design envelope from being exceeded. Steady-state and dynamic methodologies are used to meet IEC 61511 and ISO 10418 requirements. Flare, Venting, Relief, & Blowdown System Performance Safe disposal of fluids in an emergency situation is an essential part of any process plant design. Hence flare systems are considered safety-critical. We use Flare System Analyzer and other industry-standard tools to ensure back-pressures, velocities, momentum, flare tip radiation, and low-temperature material design constraints are all met. Overpressure Protection assessment Different combinations of instrumented and mechanical overpressure protection systems exist in all process plant designs. Vessel and piping design reviews, relief valve sizing and selection to the requirements of API 520/521/526, and reliability assessments of instrumented systems under IEC61511 are all necessary to ensure the system is suitably protected. Functional Safety Management Plan The Functional Safety Plan describes the project plan, organization and principles to ensure functional Safety throughout the entire period of the project development and asset operation. A functional safety plan must state a set of measures to ensure that the target Safety Integrity Level (SIL) is achieved. SIL Allocation/LOPA SIL allocation, e.g. with Layers of Protection Analysis (LOPA) is a methodology for defining performance requirements for safety instrumented functions. In addition, the assessment can be used to evaluate whether adequate protection layers are in place to reduce risks to acceptable levels. SIL Compliance verification A SIL Compliance verification is applied to confirm that Safety Instrumented Functions (SIFs) meet the performance requirements, as detailed in the functional safety process. Such requirements include reliability requirements, architectural requirements as well as a demonstration of avoidance and control of systematic errors. Functional Safety Assessment (FSA) FSA is a third-party evaluation of the functional safety activities in a project, to confirm that standards (such as IEC 61508 and 61511) as well as Company requirements are correctly applied. FSAs are typically performed in steps depending on the phase and maturity of the project. The FSA prevents systematic failures and helps to ensure that functional safety is achieved in facilities. Safety Manual A Safety Manual is documentation provided by equipment or system suppliers justifying use in SIL-related functions. The intention with the Safety Manual is to provide input documentation for the overall SIL Compliance verification, and to demonstrate that the supplier organization, management systems and manufacturing process ensure sufficient reliability and minimizes systematic errors. SIS Performance Monitoring Safety Instrumented Systems (SIS) performance monitoring involves follow-up and benchmarking of SIS component failure frequency against design documentation and acceptance criteria. Among others, this can be used to adjust test intervals, improve test and maintenance regime or input to modification projects. Process safety training We support organizations with tailormade training courses within all aspects of process safety. For example, ORS has supported asset owners with SIL training for operators, functional safety management, technical safety, and planning / execution of Process Hazard Analysis. Proof test procedures Proof Test Procedures involve systematic testing of Safety Instrumented Functions (SIFs) to detect hidden dangerous failures that diagnostics might miss. These procedures ensure that sensors, logic solvers, and final elements can respond to hazardous conditions as intended, maintaining the required Safety Integrity Level (SIL) and optimizing maintenance intervals. Pre start-up safety reviews (PSSR) Pre Start-Up Safety Reviews (PSSR) are comprehensive evaluations conducted before initiating operations of new or modified equipment. The PSSR process verifies that all safety, environmental, and operational requirements are met, ensuring the facility is safe to start up. This includes reviewing documentation, field verification, and addressing any outstanding safety. cause and effects (c&e) The cause-and-effect diagram offers information about different causes and their trip effects on the field equipment. This document is used for e.g. emergency shutdown (ESD), process shutdown (PSD) and fire and gas systems (F&G) to identify various causes and their associated trips in a matrix style for better and simpler interpretation. Causes can include a change in the state of a digital input, a High High/Low Low alarm from an analogue input, and interlock logic. Effects can include i.a. tripping a motor or pump, closing a valve, opening a pressure relief valve or activating an emergency alarm. Find Out How We Can Work Together CONTACT US Latest Insights Kvantitativ risikovurdering (QRA): Hvad er det, og hvornår anvendes det? MORE INSIGHTS

SERVICES Physical Security Up Anchor 1 Physical security is an essential pillar of any risk management framework. In a world where threats to infrastructure, facilities and people can range from theft and vandalism to sabotage and hostile actors, a proactive and well-designed physical security approach ensures your organisation is prepared, resilient and protected. The framework should factor in that the physical security landscape is dynamic. Threats evolve, assets change and environments shift, necessitating periodic review, adaptation and adjustments. At ORS Consulting we help organisations embed robust physical security measures into their broader safety and risk framework, creating integrated protections that deter threats, improve detection, enhance response readiness and support business continuity. We tailor our services to your unique risk profile and compliance framework and focus on enabling informed decisions on security measures that protect people, assets and critical functions, without introducing unnecessary complexity or operational burden. Related Studies & Assessments PHYSICAL SECURITY RISK ASSESSMENT A risk-based assessment identifying credible threats, vulnerabilities and consequences affecting people, assets and operations. The study establishes a clear risk picture and supports decision-making on proportionate and effective physical security measures. SECURITY CONcEPT & DESIGN STUDY Development or review of the overall physical security concept, including zoning, access control, perimeter protection, surveillance and detection. The study ensures security measures are integrated with facility layout, operational needs and risk acceptance criteria. PHYSICAL SECURITY GAP ANALYSIS & AUDIT A review of existing physical security arrangements against regulatory requirements, recognised principles and company standards. Identifies gaps, improvement areas and prioritised actions to strengthen the organisation’s security posture. Critical Asset Identification & Protection Study Identification and classification of critical assets and functions, with assessment of required protection levels to prevent unacceptable consequences. Often used as a foundation for security strategy, investment prioritisation and resilience planning. Security Organisation & Preparedness Review Assessment of roles, responsibilities, procedures and competence related to physical security and incident response. The study supports targeted training, exercises and organisational measures to ensure security works in practice. Find Out How We Can Work Together CONTACT US Latest Insights Kvantitativ risikovurdering (QRA): Hvad er det, og hvornår anvendes det? MORE INSIGHTS

ORS supports power and utility companies with the provision of to-the-point technical risk management and process engineering advisory and training services to achieve improved safety and operational performance. SECTORS Power and Utilities The power and utilities sector faces many challenges in terms of reducing greenhouse gas emissions and providing secure, reliable, and affordable services. ORS supports power and utility companies with the provision of to-the-point technical risk management and process engineering advisory and training services to achieve improved safety and operational performance. Some examples of project engagements Client: Combined Power Plant and Desalination Unit, United Arab Emirates Project: Technical and Operational Risk Management Training Client: Regional Power and Utility Company, Sweden Project: Technical Safety and Regulatory Compliance Support for new hydrogen production facility Client: Public Power and Utility Company in Aruba Project: Cybersecurity Risk Assessment and C-HAZOP for Power Plant Expansion Project Client: Power Plant Technology Supplier, Finland Project: Provision of Functional Safety, Process Safety and Quantitative Risk Assessment (QRA) services for multiple power plant development projects around the world Client: Power and Utility Supplier, Denmark Project: Technical Safety and Risk Analysis Support for multiple projects including offshore wind sector and hydrogen production plants Client: Electrical and Utility Supplier, Colombia Project: Provision of training: technical risk assessments, electrical HAZOP etc. Client: Multinational Engineering and Technology Company, Sweden Project: Technical Risk Management Studies for Offshore Wind Power Development Projects in Germany Client: Leading Engineering, Procurement and Construction (EPC) Company, Denmark Project: RAM Analysis, HAZOPs, HAZIDs and Technical Safety Support for multiple Offshore Wind development projects in Americas, Asia, and Europe. available commercial tools: PHAST PHA-PRO Miriam RAM Bow-tie XP Aspen HYSYS Flaresim Symmetry Process Simulation CARA Fault Tree available NON-commercial tools: Onshore QRA Software for Risk Integration (ISO curves / F-N curves) Offshore QRA Software Consequence Modelling Hazardous Area Classification (ORS-HAC) Thermodynamic/Process Studies ORS also has access to an extensive in-house data collection in addition to subscriptions to recognized national/international data sources. Find Out How We Can Work Together CONTACT US

System Reliability and Availability are a staple in most businesses. It is the probability that a component, part, system, or process performs correctly within a specified period. A reliable system is one that will function appropriately with a minimum need for maintenance or repair SERVICES System Reliability and Availability Up Anchor 1 Reliability is a staple in most businesses. It is the probability that a component, part, system, or process performs correctly within a specified period. A reliable system is one that will function appropriately with a minimum need for maintenance or repair Most systems in facilities constitute interconnected components, with each component playing its role and helping to achieve a performance level. A system reliability assessment allows businesses to identify weaknesses of these components and quantify the impact of their failures on the overall system or process. ORS is a leading system reliability solutions provider. We are helping businesses and facilities with a wide range of services, including uptime and availability assessments, Fault Tree Modelling, among others. System Reliability and Availability Related Studies FMEA/FMECA FMEA (Failure Modes and Effect Analysis) and FMECA (Failure Modes Effects and Critical Analysis) are methodologies used to determine potential failure modes in a system and provide corrective measures for each failure mode. FMECA is similar to FMEA with regard to risk assessment and failure analysis. However, in addition to FMEA functionalities, FMECA ranks failure modes in order of severity. RAM Analysis RAM analysis is a method to define the production capacity and availability of a system to keep producing. This analysis involves a mapping of the different failure modes, frequencies, consequences, and their effect on production. RAM Analysis helps to reduce costs, debottleneck and provide input to spare parts and maintenance planning. Learn more > Production Assurance Production assurance describes the certainty of a facility achieving its production goals and meeting its intended end-results. End results may be customer expectations, the safety of a production process, or reduced production costs. Production assurance is particularly important within systems associated with oil and gas exploration and is introduced in ISO 20815:2008 standard. Fault Tree Modeling Fault Tree Modeling is a methodology used for conducting reliability analyses of complex systems. It involves creating a logical representation to model chains or pathways that can lead to failure or an undesirable loss event. It helps to keep systems safe and in desirable operating conditions. System Safety System safety is a risk management methodology that involves the identification and analysis of different hazards in a system, process, or facility. It also involves the provision of measures to eliminate or mitigate the effect of these risks. Among others, system safety is widely applied in the defence industry. Find Out How We Can Work Together CONTACT US Latest Insights Kvantitativ risikovurdering (QRA): Hvad er det, og hvornår anvendes det? MORE INSIGHTS

Ensure your ICS and OT systems are secure with robust cybersecurity measures. Discover how ORS can help safeguard your operations and protect critical infrastructure from cyber threats. SERVICES ICS/OT Cybersecurity Up Anchor 1 As industrial operations become more connected, the risk of cyber threats targeting critical systems increases. Asset owners must ensure that their Industrial Control Systems (ICS) and Operational Technology (OT) are designed, maintained, and operated to minimize cybersecurity vulnerabilities. OT/ICS cybersecurity requires a structured approach to protecting industrial systems from cyber threats that could lead to safety or operational disruptions. It focuses on safeguarding critical infrastructure by implementing security measures to prevent, detect, and mitigate cyber incidents that could compromise industrial processes. In industrial environments, cyber safety plays a crucial role alongside cybersecurity. While cybersecurity broadly addresses the protection of data, networks, and systems, cyber safety specifically focuses on preventing physical harm, environmental impact, and operational hazards caused by cyber incidents. In industries such as oil and gas, chemicals, and manufacturing, where cyber threats can directly lead to fires, explosions, or equipment failures, cyber safety ensures that security measures align with safety-critical objectives. A key element of OT/ICS cybersecurity and cyber safety is ensuring the resilience of safety-critical systems. This includes Cybersecurity Risk Assessments (CSRA), defining security requirements, and implementing protective measures in line with standards such as IEC 62443. Cyber threats impacting safety systems, such as Emergency Shutdowns (ESD) or Safety Instrumented Systems (SIS), must be identified and mitigated to ensure safe and reliable operations. ICS/OT cybersecurity Related Studies initial cybersecurity risk assessment An initial cybersecurity risk assessment involves identifying and evaluating cyber threats to Industrial Control Systems (ICS). It defines the System under Consideration (SuC), assesses vulnerabilities, and determines the required Security Level Target (SL-T) based on risk. This assessment lays the foundation for implementing appropriate cybersecurity controls to mitigate risks to an acceptable level. Both applicable for legacy and new projects. Detailed cybersecurity risk assessment A detailed cybersecurity risk assessment builds on the initial assessment by performing an in-depth analysis of threats, vulnerabilities, and potential attack scenarios for the System under Consideration (SuC). It evaluates the effectiveness of existing security measures, identifies gaps, and determines specific countermeasures to achieve the required Security Level Target (SL-T). This assessment ensures a risk-based approach to cybersecurity, aligning protections with operational and safety requirements. Vulnerability assessment A vulnerability cybersecurity assessment identifies and evaluates weaknesses in Industrial Control Systems (ICS) that could be exploited by cyber threats. It involves analyzing system architecture, configurations, and known vulnerabilities in hardware, software, and network components. The assessment helps prioritize remediation actions to reduce exposure and improve the overall cybersecurity posture. gap/compliance assessment A GAP/compliance assessment evaluates how well an organization's security measures align with relevant standards or internal policies. It identifies deficiencies (gaps) in policies procedures, and technical controls compared to required security levels. Security level allocation Security level allocation involves assigning a required Security Level Target (SL-T) to Industrial Control System (ICS) components based on identified cyber risks. It ensures that each system, zone, or conduit meets the necessary security requirements to mitigate threats. This process aligns cybersecurity protections with operational and safety needs while maintaining a defense-in-depth approach. A Cybersecurity Requirement Specification (CSRS) defines the security controls and measures needed to protect an Industrial Control System (ICS) based on its identified risk and Security Level Target (SL-T). It ensures that cybersecurity requirements are systematically documented, similar to the Safety Requirement Specification (SRS) in IEC 61511 for functional safety. Find Out How We Can Work Together CONTACT US Latest Insights Kvantitativ risikovurdering (QRA): Hvad er det, og hvornår anvendes det? MORE INSIGHTS

ORS works with leading suppliers of decarbonization technology, engineering companies, and asset owners for improved safety and production performance in green transition projects. SECTORS Green Transition ORS works with leading suppliers of decarbonization technology, engineering companies and asset owners for improved safety and production performance in green transition projects. The green transition projects do all promote a shift towards a sustainable economy that is not based on fossil fuels and overconsumption of natural resources. Some examples of project engagements Client: Leading Engineering and Operator Companies in Norway Project: Process Safety and Technical Safety Support for Carbon Capture and Subsea Injection Project Client: Multiple Oil and Gas Operator Companies in Norway Project: Technical Safety and Functional Safety Support & 3rd party independent assessments for Offshore Electrification Projects Client: Engineering and Technology Company, Norway Project: Technical Safety and Process Safety Support for Land-based Carbon Capture and Storage (CCS) facility. Client: Technology & System Supplier, Norway Project: Technical Safety and Functional Safety Support for a Leading Hydrogen Production System Supplier Client: Engineering Company & Utility Company, Denmark Project: Technical Safety, Process Safety and Functional Safety Support for large green fuels production facilities in Denmark Client: Multinational Engineering Company, Norway Project: Technical Risk and Safety Assessments for offshore green hydrogen & ammonia production on a floating unit offshore (Asia) Client: Scandinavian Engineering and Technology Supplier Project: Technical Risk and Safety Assessments for new bio-LNG terminal in Germany Client: A Danish partnership of industry leaders, Denmark Project: Process Safety, HAZOP and SIL Assessments for commercial green ammonia plant available commercial tools: PHAST PHA-PRO Miriam RAM Bow-tie XP Aspen HYSYS Flaresim Symmetry Process Simulation CARA Fault Tree Computational Fluid Dynamics (CFD) tools are widely used at ORS for assessing the consequences of hazardous events such as fire, explosion and toxic dispersion, as part of Quantitative Risk Assessments (QRA) or standalone CFD studies. available NON-commercial tools: Onshore QRA Software for Risk Integration (ISO curves / F-N curves) Offshore QRA Software Consequence Modelling Hazardous Area Classification (ORS-HAC) Thermodynamic/Process Studies ORS also has access to an extensive in-house data collection in addition to subscriptions to recognized national/international data sources. Find Out How We Can Work Together CONTACT US

SECTORS LIFE SCIENCE ORS Consulting supports the life science sector with specialist engineering, process safety and risk management services across pharmaceuticals, biotechnology, and other highly regulated process industries, including food and distilled spirits. ORS brings experience across multiple sectors, supported by well‑established risk management practices, such as oil and gas. We recognise both the parallels with, and the important distinctions from, these industries, and our goal is to deliver rigorous risk management that is genuinely suited to the operator’s risk profile and maturity. How do We add Value? ORS delivers a comprehensive range of process safety and compliance services across the life science sector, from initial hazard assessments to compliance related support and integrated advisory for operational phases. Our core service offerings include: Hazardous Area Classification: Risk assessments for facilities handling flammable substances, as well as development of Hazardous Area Classification drawings, zone schedules, and ignition source registers. The work also includes supporting clients to comply with relevant regulations such as ATEX directives, DSEAR (UK), etc. Process and functional safety : ORS supports clients with process safety studies from the initial HAZOP in concept stage until detailed design, including the link to further SIS lifecycle activities further down the line, such as SIL allocation, SRS, SIL compliance, in accordance with IEC 61508 / IEC 61511. Regulatory Compliance Support: Many life science facilities hold Seveso/COMAH-listed substances above threshold quantities, carrying defined legal obligations. ORS supports operators preparing necessary documentation for audits and new expansions, e.g., by conducting HAZID, updating consequence modelling, etc. Reliability, Availability & Critical Spares: RAM analysis and FMECA for production-critical equipment. Unplanned downtime in life science manufacturing carries significant commercial and reputational consequences as the sites are often classified as socially critical infrastructure. ORS support operators in identifying reliability vulnerabilities, defining critical spares requirements, and structuring maintenance regimes to safeguard production performance. Process Safety Training: To build genuine process safety competence within our clients' organisations, ORS develops site-specific process safety training for teams at all levels, from shift operators to senior management, focused on building genuine competence within process safety. Read more about our experience within the Life Science sector below Pharmaceuticals The pharmaceutical and biotechnology industries are governed by the Good Manufacturing Practice (GMP) framework, where product quality, patient safety, and regulatory compliance are inseparable from systematic control of technical and process‑related risks. Safety‑critical systems must not only function correctly, but also be documented, traceable, testable, and governed throughout their lifecycle. Failures, undocumented changes, or poorly controlled modifications to process, automation, or protection layers can lead to batch rejection, regulatory findings, or production shutdowns. Consequently, functional safety activities and process risk studies such as Hazard and Operability (HAZOP) and Layers of Protection Analysis (LOPA) studies must integrate seamlessly with GMP processes, including validation, deviation management, and change control. Some examples of project engagements Client: World-leading biopharmaceutical company, Denmark Project: Integrated advisory within functional safety, supporting the client from the hazard and risk assessment phase, SIL allocation, SRS, SIL Verification and auditing. Client: Specialised life‑science manufacturing company, Norway Project: Process safety and HSE support for a facility extension, supporting the client with early hazard identification, prepare and plan HAZOP activities, and manage environmental and operational risks alongside project execution. Spirit and Distilleries The distilled spirits industry handles flammable inventories at a scale that places squarely within scope for regulatory scrutiny. Whether you operate a single malt distillery, a large-scale grain plant, or a central blending and bottling facility, the obligations under ATEX (EU) / DSEAR (UK), Seveso/COMAH, and the associated HSE inspection are enforced. Process and functional safety are an effective way to support the distilled spirits sites in understanding and meeting their regulatory obligations. ORS delivers practical, site‑focused studies covering HAZIDs, HAZOPS, SIL/LOPA, ATEX/DSEAR, hazardous area classification and Seveso/COMAH, tailored to the realities of the distilled spirits industry. Some examples of project engagements Client: Ethanol production site, Sweden Project: Support with updating risk assessments as part of Seveso 5-year audit (including HAZID and consequence assessments), as well as training within the process safety domain. Food Industry Production of food is often not associated with hazardous substances; however, the supporting systems (e.g., cooling system) may consist of hazardous chemicals that can pose a risk for both personnel, quality, environment and asset. Understanding the key hazards contributing to the overall risk picture beyond the main process is essential for ensuring a safe plant. HACCP (Hazard Analysis and Critical Control Points) is commonly used in the food industry to identify, evaluate, and control food safety hazards throughout the production process. It addresses biological, chemical, and physical hazards and defines critical control points (CCPs) where control measures are required to ensure food safety. HACCP is recognised as a basis for food safety management within EU and international food regulations. Some examples of project engagements Client: Food producer, Norway Project: Supporting client with hazard identification and consequence modelling of the production plant. Find Out How We Can Work Together CONTACT US

Learn about ORS Consulting, a leader in risk management advisory services, including barrier management, process safety and SIL, system reliability and availability, and safety and compliance. COMPANY OVERVIEW LOCATIONS OUR VALUES ORS Consulting The preferred risk-based industrial advisory partner OUR STORY BY THE DIGITS 16+ YEARS IN BUSINESS 200+ CLIENTS SERVED 2000+ PROJECTS COMPLETED COMPANY OVERVIEW Founded in 2009 in Malmö, Sweden, ORS Consulting is a risk and safety consultancy dedicated to helping industrial asset owners prevent process-related accidents and improve uptime. Our mission is to provide to the point advisory services that support decision-making and optimization. COMPANY TIMELINE LOCATIONS ORS Consulting has business units and offices in Denmark , Norway , Sweden , Türkiye , Netherlands and the UK . We work as One Team by combining local presence with a strong and global team of risk and safety specialists. OUR VALUES Our Vision The preferred risk-based industrial advisory partner. Our Guiding Principles One Team Working together with cross-formed teams based on competence and availability To the Point Zero-based approach to stay focused, avoid fancy and simply deliver quality Client-oriented Creating value with long-term focus, combining expertise and excellent client service ORS Quality Policy ORS HSE Policy HOW CAN WE HELP? We are here to assist you. Please feel free to contact us with any questions, comments or inquiries you may have. We value your feedback and look forward to hearing from you. Contact us

HydDown Rigorous Demo Tool HydDown is a program for vessel filling and discharge simulations, primarily intended for hydrogen cylinders but also applicable to other pure gases and non-condensing mixtures, such as dry natural gas. It calculates the time-dependent vessel response in terms of pressure and temperature for both the fluid inventory and the vessel's metal wall.

Stay ahead with ORS Consulting's events. Discover upcoming webinars and workshops on technical safety and risk management. Visit our Events page to learn more. ORS CONSULTING webinars Below you can find information and recordings from previous webinars held by ORS Consulting. To widen your knowledge about technical risk, process safety, and risk management please also see our insights page , full of articles covering many topics. SEVESO-DIREKTIVET: UPPFYLL KRAVEN MED RÄTT RISKANALYS FÄRDIG 6. maj 2025 kl. 14.00.00 TITTA PÅ REPRIS Why ICS/OT Cybersecurity Must Be Part of Industrial Risk Management FINISHED 27. marts 2025 kl. 11.00.00 WATCH REPLAY Introduction to RAM studies - how can it add value? Finished 12. december 2024 kl. 14.00.00 WATCH REPLAY Flare System Dynamic Modelling - Approaches & Values Finished 24. september 2024 kl. 12.00.00 WATCH REPLAY Using Fault Tree Analysis for SIL determination Finished 5. juni 2024 kl. 11.00.00 WATCH REPLAY Introduction to Barrier and SECE Management Finished 7. marts 2024 kl. 12.00.00 WATCH REPLAY Essentials for confident and effective HAZOP participation Finished 29. september 2023 kl. 11.00.00 WATCH REPLAY The Difference Between Process Safety Time and SIF Response Time Finished 15. juni 2023 kl. 11.00.00 WATCH REPLAY FMEA, FMECA AND FMEDA: Understanding the key differences Finished 14. april 2023 kl. 11.00.00 WATCH REPLAY Safety Integrity Level. What is SIL and when it is required Finished 2. marts 2023 kl. 11.00.00 WATCH REPLAY Functional Safety Assessment- Operations: waste of time or value creation? Finished 1. april 2022 kl. 10.00.00 WATCH REPLAY 5 essentials for understanding process HAZOPs Finished 28. maj 2021 kl. 10.00.00 WATCH REPLAY