ORS Consulting's Privacy Policy outlines our commitment to protecting your personal information. Read our policy to learn how we collect, use, and secure your data. Trust us to safeguard your privacy. PRIVACY POLICY ORS Consulting is committed to respecting your privacy and we understand how important it is to protect an individual’s personal data and apply high ethical and regulatory standards to the processing of such data. This Privacy Policy explains the policies and practices that ORS Consulting has developed to safeguard personal data and comply with applicable data protection laws. What WE COLLECT (A) INFORMATION THAT WE COLLECT DIRECTLY FROM YOU ORS Consulting collects information directly from you when you choose to sign up to our newsletter and contact forms on our websites, call or e-mail us, or otherwise provide information directly to us. The following are examples of information we may collect directly from you: Name Contact details (e-mail address, telephone number, postal address, etc.) Business information, including employment history, education history, qualifications, occupation and areas of specialization. (B) INFORMATION WE COLLECT WHEN YOU VISIT OUR WEBSITES When you visit this website, we have access to the following types of information about you: IP address. We record the internet protocol (IP) address of your computer when you visit this website. The IP address does not identify you personally, but it allows us to maintain communications with you as you move about this website. HOW WE USE YOUR INFORMATION By providing your personal data, you agree that, where it is permitted by local law or where you have agreed to receive these communications from us, we may use the information: to respond to your requests; to improve our level of service; to improve the content of our communications; to provide you with tips, helpful information, product news and updates; to notify you of our new services; to seek your views on our services; to consider your application for employment; for our own administrative and quality assurance purposes; and for other purposes that may be detailed on this website. In using your personal data, we follow the following principles: (A) LIMITATION ORS Consulting will only collect personal data about you that is necessary for one or more of our legitimate business purposes or is required by law. In addition, ORS Consulting will only collect personal data by lawful and fair means and not in an unreasonably intrusive manner. (B) PURPOSE When ORS Consulting collects your personal data, we will take reasonable steps to advise you of what personal data we are collecting, the purposes for which we are collecting the information and will use such information only for stated primary or related secondary purposes. (C) DISCLOSURE ORS Consulting will advise you of the organizations (or types of organizations) to which we may normally disclose that personal data, and we will provide you with contact information in the event you would like access to your personal data we hold about you or need to update your personal data or preferences. (D) ACCURACY If you suppose that ORS Consulting may hold inaccurate information about you, please reach our contact: contact@ors-consulting.com (E) RIGHT TO BE FORGOTTEN If you execute a right to be forgotten, collected data (from our website) will be deleted from our system without any consequences for you. We may keep your information in case if it is located inside legally binding documents or backup files. COOKIES AND OTHER TECHNOLOGY ORS Consulting uses a variety of technologies to assess how our sites are used, to personalize your experience and to deliver online content tailored to your interests, such as internet tags and cookies. Cookies are small text files that are placed on your computer or other web-accessing devices by our websites. These cookies allow us to distinguish you from other users of this website and enhance your experience when you browse this website. For more information on cookies and other data collection technologies, please refer to our Policy about Cookies. HOW WE STORE INFORMATION AND YOUR RIGHTS We retain your personal data for no longer than is necessary for the purposes for which it has been collected. You may contact ORS Consulting at any time if you would like to access your Personal Data or require information about the Personal Data that we hold about you (such as the source of the Personal Data). You may object to the processing of your Personal Data for legitimate reasons, and you may also request the correction or erasure of it. Where ORS Consulting processes your personal data on the basis of your consent, you may withdraw your consent at any time without any prejudice to you by contacting us using the contact details below. This will not affect the processing of your data based on your consent previous to the point at which you withdraw consent. SECURITY ORS Consulting takes measures to ensure that your data collected from this website is securely processed and stored. We have implemented strong cyber security measures based on industry best practice. DATA TRANSFER TO THIRD COUNTRIES ORS may transfer information to third countries, including ORS Türkiye and to external service providers. ORS ensures that additional measures have been taken to make data transfers to third countries secure and provide an adequate level of protection. CONTACT US If you have any concerns about the manner in which your personal data has been collected or handled by ORS Consulting, or any queries in regard to this privacy statement or would like to exercise your rights as outlined above, you can contact contact@orsconsulting.no CHANGES IN OUR PRIVACY POLICY We will only use personal data in the manner described in the Privacy Policy in effect when the information was collected from you. However, we reserve the right to change the terms of this Privacy Policy at any time (for example due to changes in data protection laws) by posting revisions to this website. We will take adequate and reasonable action to obtain your consent if required, as a result of any such change. Updated: January 15, 2025 __________________________________________________________________ POLICY ABOUT COOKIES We use technologies on the site www.ors-consulting.com (the Site) to collect information that helps us improve your online experience. In this Cookie Policy, we refer to these technologies, which include cookies and pixels collectively as cookies. This policy explains the different types of cookies used on the Site and how you can control them. We may change this Cookie Policy at any time. Please take a look at the last effective date at the top of this page to see when this Cookie Policy was last revised. Any changes in this Cookie Policy will become effective when we make the revised Cookie Policy available on or through the Site. Any personal information that we collect through the use of cookies is obtained through transparent notice to you and through your consent. Where applicable, we provide you with the opportunity to opt out. WHAT IS A COOKIE? Cookies are small text files that are stored on your computer or mobile device. They are widely used in order to make websites work, or work in a better, more efficient way. They can do this because websites can read and write these files, enabling them to recognise you and remember important information that will make your use of a website more convenient (e.g. by remembering your user preferences). WHAT COOKIES DO WE USE? Below we list the different types of cookies we may use on the Site. PERFORMANCE COOKIES Performance cookies, which are sometimes called analytics cookies, collect information about your use of this Site and enable us to improve the way it works. For example, performance cookies show us which are the most frequently visited pages on the Site, allow us to see the overall patterns of usage on the Site, help us record any difficulties you have with the Site and show us whether our advertising is effective or not. PERFORMANCE COOKIES ON THIS SITE ARE: Google Tag Manager, Google Analytics, Google Search Console To enable website owners to track visitor behavior and measure site performance. To opt-out of Google Analytics and Google Tag Manager, please visit the Google Analytics site . Microsoft Clarity Heatmap to track visitor behavior and site performance. Targeting or Advertising Cookies Our service providers and we may use targeting or advertising cookies to deliver ads that we believe are more relevant to you and your interests. For example, we may use targeting or advertising cookies to limit the number of times you see the same ad on our Site and to help measure the effectiveness of our advertising campaigns. These cookies remember what you have looked at on the Site and we may share this information with other organizations, such as advertisers. TARGETING AND ADVERTISING COOKIES ON THIS SITE ARE: Google ADS Our service providers and we may use targeting or advertising cookies to deliver ads that we believe are more relevant to you and your interests. LINKS TO AND FROM EXTERNAL WEBSITES Our website contains links to external websites run by other organizations. This privacy policy applies only to our website and not to those external websites that we link to, which will have their own privacy policies. We are not responsible for these external websites and their privacy policies and practices. In addition, if you are linked to our website from an external site, we cannot be responsible for the privacy policies and practices of the owners and operators of that external website and recommend that you check the privacy policy of that external site. REFUSE TO ACCEPT COOKIES You may refuse to accept cookies from this Site at any time by activating the setting on your browser which allows you to refuse cookies. Please be aware that if cookies are disabled, not all features of the Site may operate as intended. Responsible Use of Artificial Intelligence ORS Consulting uses artificial intelligence (AI) tools to support the delivery of our engineering, risk and advisory services. We are committed to using AI responsibly, transparently and in line with applicable law. How we use AI We use AI to support our specialists in delivering our services. AI-assisted work is reviewed and validated by qualified ORS personnel before it informs any deliverable, and the professional judgement of our experts remains paramount. All communication with clients and the public is conducted by people, not AI. Our principles Human oversight - AI assists; people decide. Qualified staff review and validate AI-supported work. Transparency - we set out our approach in this public statement and confirm on request whether AI has contributed to a deliverable. Fairness - we take care to avoid unfair bias or discriminatory outcomes. Confidentiality and client data - we do not use AI tools that train on client data to improve publicly available AI systems, and we select AI services whose terms reflect this. Client data and confidential information remain subject to our confidentiality and data-protection obligations. Privacy and data protection - we handle personal data in accordance with applicable data protection laws and our privacy policies, and we limit what is shared with AI tools. AI processing may take place within or outside the EEA under the safeguards described in our Privacy Policy. Security - AI is used only through controlled, managed systems with appropriate safeguards. Accountability - ORS remains responsible for its work, whether or not AI was used to support it. AI-assisted meeting notes Where meetings or workshops are recorded or transcribed using AI, the resulting transcripts, summaries and notes are informal working materials only. They do not represent ORS's professional position - only written deliverables issued and signed by an authorized ORS representative do. How we manage AI responsibly We train our people in the responsible use of AI (AI literacy). We provide access to AI only through secure, approved platforms. We do not use AI for automated decisions about individuals or for uses classified as high-risk under the EU AI Act. Contact Questions about our use of AI can be sent to admin@ors-consulting.com . This statement applies to ORS business units. Last updated: 31/08/2026.

SERVICES Physical Security Up Anchor 1 Physical security is an essential pillar of any risk management framework. In a world where threats to infrastructure, facilities and people can range from theft and vandalism to sabotage and hostile actors, a proactive and well-designed physical security approach ensures your organisation is prepared, resilient and protected. The framework should factor in that the physical security landscape is dynamic. Threats evolve, assets change and environments shift, necessitating periodic review, adaptation and adjustments. At ORS Consulting we help organisations embed robust physical security measures into their broader safety and risk framework, creating integrated protections that deter threats, improve detection, enhance response readiness and support business continuity. We tailor our services to your unique risk profile and compliance framework and focus on enabling informed decisions on security measures that protect people, assets and critical functions, without introducing unnecessary complexity or operational burden. Related Studies & Assessments PHYSICAL SECURITY RISK ASSESSMENT A risk-based assessment identifying credible threats, vulnerabilities and consequences affecting people, assets and operations. The study establishes a clear risk picture and supports decision-making on proportionate and effective physical security measures. SECURITY CONcEPT & DESIGN STUDY Development or review of the overall physical security concept, including zoning, access control, perimeter protection, surveillance and detection. The study ensures security measures are integrated with facility layout, operational needs and risk acceptance criteria. PHYSICAL SECURITY GAP ANALYSIS & AUDIT A review of existing physical security arrangements against regulatory requirements, recognised principles and company standards. Identifies gaps, improvement areas and prioritised actions to strengthen the organisation’s security posture. Critical Asset Identification & Protection Study Identification and classification of critical assets and functions, with assessment of required protection levels to prevent unacceptable consequences. Often used as a foundation for security strategy, investment prioritisation and resilience planning. Security Organisation & Preparedness Review Assessment of roles, responsibilities, procedures and competence related to physical security and incident response. The study supports targeted training, exercises and organisational measures to ensure security works in practice. Find Out How We Can Work Together CONTACT US Latest Insights Ingen indlæg er offentliggjort på dette sprog endnu Når indlæg er udgivet, kan du se dem her. MORE INSIGHTS

SERVICES WORKING envIronment AND HUMAN FACTORS Up Anchor 1 Working Environment and Human Factors management is committed to establishing and overseeing conditions that promote health, comfort, and operational efficiency for all personnel throughout the entire facility lifecycle. This includes careful consideration of layout and design to ensure a safe and optimal functionality that comply with laws and regulations. This field is integral to every stage of a project, including the Concept phase, Front-End Engineering Design (FEED), and final execution. At its core, the technical working environment places the wellbeing of individuals at the forefront. It ensures that, during both operation and maintenance, workers’ tasks are fully considered in the final design. By adopting this approach, risks are not only identified but also managed proactively, safeguarding those working within the facility. Typically, depending on project scope, these factors are covered: Ergonomics (arrangement/layout/access), Human Factors Chemical substances Noise & vibration Biological agents Illumination Indoor climate Outdoor operations Radiation Psychosocial & organisational conditions Visual display units Job hazard Working Environment Advisory throughout the project lifecycle or asset operation to ensure that design solutions promote a safe and healthy workplace, minimise exposure to harmful factors (e.g., noise, vibration, chemicals, ergonomics), and comply with standards and regulatory requirements. Risk-Based Workshops for identifying working environment hazards in a collaborative, multi-disciplinary setting such as Working Environment Health Risk Assessment (WEHRA) and Chemical Health Risk assessment (CHRA), enabling early integration of human factors and ergonomics into design decisions. Performing Working Environment Analyses and Inspections to establish the risk profile by assessing exposure to physical, chemical, and psychosocial factors, benchmarking against acceptance criteria, and recommending mitigation measures Working Environment AND HUMAN FACTORS risk related studies and typical deliveries WORKING ENVIRONMENT PROGRAM The Working Environment Programme is a structured plan to manage health and working environment risks throughout all project phases. It outlines objectives, activities, responsibilities, and documentation to ensure compliance with regulatory requirements and integration into the project’s HSE framework. The programme promotes interdisciplinary collaboration and systematic risk assessments, such as WEHRA, CHRA, and WEAL, to secure safe and healthy working conditions. WORKING ENVIRONMENT AREA LIMITS (WEAL) WEAL defines the maximum permissible exposure levels for working environment factors such as noise, vibration, lighting, and climate (air changes and temperature) in different areas of a facility. These levels are typically framed in concept- and study phase. It provides clear acceptance criteria to ensure that design and operational conditions protect personnel health and comply with regulatory requirements. WORKING ENVIRONMENT AREA CHARTS (WEAC) WEAC is a documentation tool in the form of a document containing charts for each room and each area on the facility. Areas that have the same working environment conditions may be represented by a single, typical WEAC. This chart provides an overview of the working environment requirements applicable to the specific area or room, covering factors such as noise, vibration, lighting, radiation, and climate (including air changes and temperature). It directly relates to WEAL (Working Environment Area Limits) by ensuring that each classified area complies with the defined acceptance criteria and exposure limits set by WEAL in the study phase. Opposed to the WEAL, the WEACs will include predicted values and as-built measurements. Additionally, any non-conformities in the specific area. The WEACS are intended to be regarded as live information during all phases of the project. WEACS are typically initiated in FEED phase and are updated through execution phase and finally completed with as-built measurements. This ensures that once an area is categorised, its design and operation can be verified against the correct acceptance criteria, creating a clear link between classification and compliance. WORKING ENVIRONMENT HEALTH RISK ASSESSMENT (WEHRA) WEHRA is a structured assessment used to identify, evaluate, and manage potential health and working environment risks which are introduced to a facility and its personnel. This assessment is conducted in all project phases and includes the important end-users. It focuses on major hazards such as ergonomics/Human Factors, chemical substances, noise, vibration, biological agents, illumination, climate, radiation, psychosocial, and recommends mitigation measures based on a hierarchy: eliminate or substitute hazards first, then apply technical and organisational controls, and use personal protective equipment as a last resort. CHEMICAL HEALTH RISK ASSESSMENT (CHRA) A Chemical Health Risk Assessment (CHRA) is conducted to identify, evaluate, and control chemical health risks to an acceptable level across all activities involving exposure to hazardous chemicals. This assessment ensures that risks are systematically identified, assessed, and managed in a proactive manner throughout operations. Typically, a CHRA is implemented in several phases during a project. Early identification enables organizations to address hazards and risks introduced by new chemicals, such as those associated with new equipment, thereby facilitating the creation of effective, safe, and healthy workplaces, and minimizing the need for modifications during subsequent operations. The CHRA process takes the form of a structured workshop involving experts such as occupational hygienists, who provide specialized knowledge and insights to enhance the identification and management of chemical health risks. 3D-model of working environment design 3D-model verification of working environment design should be carried out regularly throughout the design development process. During these reviews, the project team uses 3D models to assess whether the design meets working environment requirements related to for example layout and access, and to recommend modifications where necessary. This approach enables early identification of risks and opportunities for improvement, ensuring that layouts support safe and efficient operations. All findings are documented for follow-up and to drive continuous improvement of the working environment. OUTDOOR RISK ASSESSMENT An outdoor risk assessment evaluates hazards for tasks performed outside on the facility, considering factors like weather, exposure time, and frequency. Each activity is scored to determine its overall risk level and prioritise mitigation measures. This ensures compliance with safety standards and reduces risks from environmental conditions. HSE-Checklist equipment packages, new areas and physical inspections The HSE checklist in NORSOK S-002 is designed to ensure that suppliers and contractors systematically address working environment requirements during design, procurement, and delivery. This checklist ensures all critical HSE aspects, ergonomics, noise, chemicals, and layout, are addressed before equipment is accepted, reducing risk and ensuring compliance. The checklist is also used for inspection of new areas on a facility or during physical inspection of new equipment. Working Environment Status Report The objective of the Working Environment Status Report is to give a summary of the various working environment activities that have been undertaken during the execution phase. The report shall reference working environment analysis and reports conducted in the project phase. Find Out How We Can Work Together CONTACT US Latest Insights Ingen indlæg er offentliggjort på dette sprog endnu Når indlæg er udgivet, kan du se dem her. MORE INSIGHTS

Since 2009, ORS has specialized in advisory services for the oil and gas industry, building its reputation in the North Sea region and supporting the entire oil and gas/hydrocarbon value chain. SECTORS Oil and Gas Since 2009, ORS has been providing highly specialized advisory services to the oil and gas industry. The company has built its reputation based on the offshore oil and gas industry in the North Sea region. Today, ORS supports the entire oil and gas / hydrocarbon value chain covering upstream- midstream and downstream areas. Some examples of project engagements Client: State-owned operator of European gas distribution pipeline systems, Norway Project: Production Assurance and RAM Analysis to secure high uptime availability for European gas supply Client: Leading Offshore Drilling Contractor, United States Project: System Reliability and FMECA Assessments for electrical and control systems in subsea Blowout Preventor (BOP) Client: Multinational Energy Company, United Kingdom, and Singapore Project: Process Safety, HAZOP and LOPA, SIL Verification and Safety Requirements Specification (SRS) for the basic- and detailed design of a new offshore field development project. Client: Offshore Oil and Gas Company, Israel Project: Fire and Gas Mapping and Validation Assessments for offshore oil platform in Israel Client: Offshore Oil and Gas Operator, Norway Project: Flare and Blowdown Studies for Norwegian Floating Production, Storage and Offloading (FPSO) Unit Client: Leading LNG FSRU (Floating Storage, Regasification Unit) operator, Norway Project: Multiple projects with process studies, simulations, and process safety support for FSRUs deployed around the world Client: Multinational Engineering, Procurement and Construction (EPC) Company, Norway, and United Kingdom Project: Provision of technical safety, functional safety, process safety, Quantitative Risk Assessment (QRA) and RAM services for greenfield development projects Client: European Engineering and Technology Supplier, Finland Project: Provision of extensive support for technical safety, functional safety, process safety and process studies for LNG projects in Europe Client: US-based LNG Operator company, USA Project: Electrical HAZOP for the new LNG Liquefaction Plant in Louisiana, USA Client: Global Subsea Technology and Engineering Companies Project: Provision of risk assessments, SIL and technical safety support to >50 subsea development projects around the world available commercial tools: PHAST PHA-PRO Miriam RAM Bow-tie XP Aspen HYSYS Flaresim Symmetry Process Simulation CARA Fault Tree Computational Fluid Dynamics (CFD) tools are widely used at ORS for assessing the consequences of hazardous events such as fire, explosion and toxic dispersion, as part of Quantitative Risk Assessments (QRA) or standalone CFD studies. available NON-commercial tools: Onshore QRA Software for Risk Integration (ISO curves / F-N curves) Offshore QRA Software Consequence Modelling Hazardous Area Classification (ORS-HAC) Thermodynamic/Process Studies ORS also has access to an extensive in-house data collection in addition to subscriptions to recognized national/international data sources. Find Out How We Can Work Together CONTACT US

In January 2024, ORS Consulting expanded its presence beyond Western Europe, establishing a dynamic new hub in Türkiye. We are committed to developing top-tier risk and safety advisory, supporting our clients in Western Europe, and adding value to high-priority clients in Türkiye and the region. LOCATIONS ORS CONSULTING IN TÜRKIYE Bridging Between Europe and the East In January 2024, ORS Consulting expanded its presence beyond Western Europe, establishing a dynamic new hub in Türkiye. Türkiye's growing industry, booming economy, and vibrant young talent make it an attractive location for our continued global growth. With its strategic position as a gateway to Central Asia and the Middle East, Türkiye offers unparalleled opportunities for collaboration and innovation. At ORS Consulting Türkiye, we are committed to developing top-tier risk and safety advisory, supporting our clients in Western Europe, and adding value to high-priority clients in Türkiye and the region. Our top-quality services include: Supporting both operators and engineering companies with integrated advisory for major field developments Assisting new industrial establishments with implementing a risk management framework according to governing regulations Conducting numerous risk analyses, including process-related reviews (e.g. HAZOPs), up-time/availability, RAM studies, barrier management activities, SIL/Functional safety studies and consequence modelling Gulay Basova Country Manager, ORS TÜRKIYE IZMIR, TÜRKIYE Gülay Başova +905373377212 +4746825632 gba@ors-consulting.com HALKAPINAR MAH. 1203/11 SK. NO: 5 -7 İÇ KAPI NO: 152 Megapol Carsi Kule Plaza KONAK/ İZMİR FIND OUT HOW WE CAN WORK TOGETHER CONTACT US

Stay ahead with ORS Consulting's events. Discover upcoming webinars and workshops on technical safety and risk management. Visit our Events page to learn more. ORS CONSULTING webinars Below you can find information and recordings from previous webinars held by ORS Consulting. To widen your knowledge about technical risk, process safety, and risk management please also see our insights page , full of articles covering many topics. SEVESO-DIREKTIVET: UPPFYLL KRAVEN MED RÄTT RISKANALYS FÄRDIG 6. maj 2025 kl. 14.00.00 TITTA PÅ REPRIS Why ICS/OT Cybersecurity Must Be Part of Industrial Risk Management FINISHED 27. marts 2025 kl. 11.00.00 WATCH REPLAY Introduction to RAM studies - how can it add value? Finished 12. december 2024 kl. 14.00.00 WATCH REPLAY Flare System Dynamic Modelling - Approaches & Values Finished 24. september 2024 kl. 12.00.00 WATCH REPLAY Using Fault Tree Analysis for SIL determination Finished 5. juni 2024 kl. 11.00.00 WATCH REPLAY Introduction to Barrier and SECE Management Finished 7. marts 2024 kl. 12.00.00 WATCH REPLAY Essentials for confident and effective HAZOP participation Finished 29. september 2023 kl. 11.00.00 WATCH REPLAY The Difference Between Process Safety Time and SIF Response Time Finished 15. juni 2023 kl. 11.00.00 WATCH REPLAY FMEA, FMECA AND FMEDA: Understanding the key differences Finished 14. april 2023 kl. 11.00.00 WATCH REPLAY Safety Integrity Level. What is SIL and when it is required Finished 2. marts 2023 kl. 11.00.00 WATCH REPLAY Functional Safety Assessment- Operations: waste of time or value creation? Finished 1. april 2022 kl. 10.00.00 WATCH REPLAY 5 essentials for understanding process HAZOPs Finished 28. maj 2021 kl. 10.00.00 WATCH REPLAY

Connect with our expert team for technical safety and risk management services at ORS Consulting. Visit our Contacts page to get in touch and learn more. ORS CONSULTING CONTACTS STOCKHOLM, SWEDEN Isabella Bergström | Department Manager +46 73 404 18 72 ibe@ors-consulting.com Gävlegatan 12B, 113 30 Stockholm, Sweden COMPANY REG NO. 559330-0949 ABERDEEN, UNITED KINGDOM Neill Renton | Country Manager T: +44 (0)1224-042882 M: +44 (0)7388-948667 nre@ors-consulting.com Louis C. Findlay | Department Manager lcf@ors-consulting.com Citibase Aberdeen Hill of Rubislaw, AB15 6BL Aberdeen, United Kingdom Registered in Scotland: SC541316 STAVANGER, NORWAY Rikard Davidsen | Department Manager +47 91 71 01 99 rda@ors-consulting.com Jåttåvågveien 7 4020 Stavanger, Norway COMPANY REG NO. 911738414 MALMÖ, SWEDEN Katarina Linde | Country Manager +46 73 62 53 705 kal@ors-consulting.com Södergatan 14, 211 34 Malmö, Sweden COMPANY REG NO. 559330-0949 GLASGOW, UNITED KINGDOM Alessandro Capaldi | Department Manager T: +44 (0)1412-225930 aca@ors-consulting.com 126 West Regent Street, Glasgow G2 2RQ LONDON, UNITED KINGDOM Sam Richardson | Department Manager T: +44 (0) 7989 977 439 sar@ors-consulting.com 201 Borough High St, London SE1 1JA ESBJERG, DENMARK Matias Wulff | Country Manager +45 93 96 31 48 mpw@ors-consulting.com Borgergade 66 ST TH, 6700 Esbjerg, Denmark COMPANY REG NO. 41765690 IZMIR, TÜRKIYE Gülay Başova | Country Manager +90 537 337 72 12 +47 46 82 56 32 gba@ors-consulting.com Halkapinar Mah. 1203/11 Sk. No: 5 -7 Ic Kapi No: 152 Megapol Carsi Kule Plaza Konak/ Izmir UTRECHT, NETHERLANDS Onur Ipek | Country Manager +31 6 15 83 11 26 oni@ors-consulting.com St. Jacobsstraat 123, 3511BP Utrecht Netherlands OSLO, NORWAY Morten Pettersen | Managing Director (General Inquiries) +47 97 73 17 80 mnp@ors-consulting.com Per Ståle Larsen | Country Manager +47 990 28 688 psl@ors-consulting.com Lilleakerveien 4A, 0283 Oslo, Norway COMPANY REG NO. 911738414 Contact Us We are here to assist you. Please feel free to contact us with any questions, comments, or inquiries you may have. We value your feedback and look forward to hearing from you. Connect directly with our offices representatives: Norway Sweden Denmark United Kingdom Türkiye Netherlands First name* Last name Email* Company Role Write a message I agree to ORS Consulting Privacy Policy * Submit

Ensure your ICS and OT systems are secure with robust cybersecurity measures. Discover how ORS can help safeguard your operations and protect critical infrastructure from cyber threats. SERVICES ICS/OT Cybersecurity Up Anchor 1 As industrial operations become more connected, the risk of cyber threats targeting critical systems increases. Asset owners must ensure that their Industrial Control Systems (ICS) and Operational Technology (OT) are designed, maintained, and operated to minimize cybersecurity vulnerabilities. OT/ICS cybersecurity requires a structured approach to protecting industrial systems from cyber threats that could lead to safety or operational disruptions. It focuses on safeguarding critical infrastructure by implementing security measures to prevent, detect, and mitigate cyber incidents that could compromise industrial processes. In industrial environments, cyber safety plays a crucial role alongside cybersecurity. While cybersecurity broadly addresses the protection of data, networks, and systems, cyber safety specifically focuses on preventing physical harm, environmental impact, and operational hazards caused by cyber incidents. In industries such as oil and gas, chemicals, and manufacturing, where cyber threats can directly lead to fires, explosions, or equipment failures, cyber safety ensures that security measures align with safety-critical objectives. A key element of OT/ICS cybersecurity and cyber safety is ensuring the resilience of safety-critical systems. This includes Cybersecurity Risk Assessments (CSRA), defining security requirements, and implementing protective measures in line with standards such as IEC 62443. Cyber threats impacting safety systems, such as Emergency Shutdowns (ESD) or Safety Instrumented Systems (SIS), must be identified and mitigated to ensure safe and reliable operations. ICS/OT cybersecurity Related Studies initial cybersecurity risk assessment An initial cybersecurity risk assessment involves identifying and evaluating cyber threats to Industrial Control Systems (ICS). It defines the System under Consideration (SuC), assesses vulnerabilities, and determines the required Security Level Target (SL-T) based on risk. This assessment lays the foundation for implementing appropriate cybersecurity controls to mitigate risks to an acceptable level. Both applicable for legacy and new projects. Detailed cybersecurity risk assessment A detailed cybersecurity risk assessment builds on the initial assessment by performing an in-depth analysis of threats, vulnerabilities, and potential attack scenarios for the System under Consideration (SuC). It evaluates the effectiveness of existing security measures, identifies gaps, and determines specific countermeasures to achieve the required Security Level Target (SL-T). This assessment ensures a risk-based approach to cybersecurity, aligning protections with operational and safety requirements. Vulnerability assessment A vulnerability cybersecurity assessment identifies and evaluates weaknesses in Industrial Control Systems (ICS) that could be exploited by cyber threats. It involves analyzing system architecture, configurations, and known vulnerabilities in hardware, software, and network components. The assessment helps prioritize remediation actions to reduce exposure and improve the overall cybersecurity posture. gap/compliance assessment A GAP/compliance assessment evaluates how well an organization's security measures align with relevant standards or internal policies. It identifies deficiencies (gaps) in policies procedures, and technical controls compared to required security levels. Security level allocation Security level allocation involves assigning a required Security Level Target (SL-T) to Industrial Control System (ICS) components based on identified cyber risks. It ensures that each system, zone, or conduit meets the necessary security requirements to mitigate threats. This process aligns cybersecurity protections with operational and safety needs while maintaining a defense-in-depth approach. A Cybersecurity Requirement Specification (CSRS) defines the security controls and measures needed to protect an Industrial Control System (ICS) based on its identified risk and Security Level Target (SL-T). It ensures that cybersecurity requirements are systematically documented, similar to the Safety Requirement Specification (SRS) in IEC 61511 for functional safety. Find Out How We Can Work Together CONTACT US Latest Insights Ingen indlæg er offentliggjort på dette sprog endnu Når indlæg er udgivet, kan du se dem her. MORE INSIGHTS

ORS Consulting: Industrial risk management and process safety advisory at your service. Your partner for technical safety and risk management services. Enhance safety, minimize risk, and improve reliability - visit us today. Industrial risk management. Improved safety and Production performance. CONTACT US Up TRUSTED BY Risk Management and Process Safety Advisory for your business ORS Consulting (ORS) was established in 2009 as an independent and specialist provider of risk management advisory services. Our ultimate goal is to ensure that our Clients avoid loss and achieve enhanced value creation. YEARS IN BUSINESS CLIENTS SERVED PROJECTS COMPLETED 16+ 200+ 2000+ LATEST ARTICLE Process QRA vs. Explosives QRA: Understanding the Key Difference Quantitative Risk Assessment (QRA) is widely used to evaluate major accident hazards across process industries. However, facilities handling energetic materials such as explosives, propellants and ammunition require specialised methodologies that differ from conventional Process QRA. This article explains the key differences between Process QRA and Explosives QRA, including frequency modelling, consequence assessment, regulatory frameworks and practical applications. Read full article Explore more insights Services Technical risk management is the set of activities to identify hazards and assess and manage risks to an acceptable level. Technical Safety and Risk Management LEARN MORE Button Button Process Safety ensures the protection and resilience of the process design against failures. Functional safety covers instrumented safety systems, and ORS supports all phases of functional safety management. Process Safety and SIL LEARN MORE Button Button Cybersecurity in industrial environments protects OT and ICS from cyber threats that could disrupt operations, compromise safety, or impact critical infrastructure. It ensures resilience through risk mitigation, security measures, and compliance with standards like IEC 62443, enabling safe and reliable industrial processes. Ics/OT CYBERSECURITY LEARN MORE Button Button A reliable system is one that will function appropriately with a minimum need for maintenance or repair. We support projects and operating assets with uptime and availability assessments. System Reliability and Availability LEARN MORE Button Button Barrier Management is crucial for preventing accidents and risks throughout an asset's lifecycle. We specialize in these areas, offering services like barrier strategy development, bow-tie analysis, risk-based maintenance, etc. Barrier Management LEARN MORE Button Button Physical security is an essential pillar of any risk management framework. In a world where threats to infrastructure, facilities and people can range from theft and vandalism to sabotage and hostile actors, a proactive and well-designed physical security approach ensures your organisation is prepared, resilient and protected. PHYSICAL SECURITY LEARN MORE Button Button Safety management is vital for all projects and assets. ORS offers expertise from concept to operation, helping you navigate complex regulations and technical risk management. Safety and Compliance LEARN MORE Button Button Chemical & Process Engineering involves the design, optimisation and operation of industrial scale processes for the safe manufacture of useful products and materials. Chemical & Process Engineering LEARN MORE Button Button Technical Working Environment management is committed to establishing and overseeing conditions that promote health, comfort, and operational efficiency for all personnel throughout the entire facility lifecycle. WORKING ENVIRONMENT and human factors LEARN MORE Button Button Button WE'RE WoRKING ALL AROUND THE WORLD. SERVING different SECTORS We specialize in providing high-end risk management services to improve the safety and production performance of our clients. Sectors SECTORS & INDUSTRIES CHEMICALS, PROCESS AND MATERIALS ORS supports land-based process facilities with regulatory compliance, risk assessments and risk-based engineering support to prevent and mitigate hazards. Learn More POWER AND UTILITIES ORS supports assets within power production to prevent accidents and enhance uptime. Learn More AQUACULTURE Supporting offshore and inshore aquaculture concepts, with strong subject matter expertise and fit-for-purpose tools. Learn More LIFE SCIENCE ORS Consulting supports the life science sector with specialist engineering, process safety and risk management services across pharmaceuticals, biotechnology, and other highly regulated process industries, including food and distilled spirits. Learn More OIL AND GAS ORS supports the entire oil and gas/hydrocarbon value chain covering upstream and downstream, with extensive experience from the global oil and gas industry. Learn More GREEN TRANSITION ORS supports renewable projects, such as hydrogen, ammonia, offshore wind and power-to-x. Learn More DEFENCE ORS supports industry leading companies in the defence industry with risk and safety studies, to ensure a safe and reliable manufacturing process. Learn More ORS Insights Ingen indlæg er offentliggjort på dette sprog endnu Når indlæg er udgivet, kan du se dem her. MORE INSIGHTS We are Always Looking for New Talents! As an employee of ORS Consulting, you will shape your brand within a leading industrial risk management brand. You will be exposed to clients across sectors and countries, with the flexibility to manage your day and direction. JOIN ORS Contact Us We are here to assist you. Please feel free to contact us with any questions, comments, or inquiries you may have. We value your feedback and look forward to hearing from you. Connect directly with our offices representatives: Norway Sweden Denmark United Kingdom Türkiye Netherlands First name* Last name Email* Company Role Write a message I agree to ORS Consulting Privacy Policy * Submit

Learn about ORS Consulting, a leader in risk management advisory services, including barrier management, process safety and SIL, system reliability and availability, and safety and compliance. COMPANY OVERVIEW LOCATIONS OUR VALUES ORS Consulting The preferred risk-based industrial advisory partner OUR STORY BY THE DIGITS 16+ YEARS IN BUSINESS 200+ CLIENTS SERVED 2000+ PROJECTS COMPLETED COMPANY OVERVIEW Founded in 2009 in Malmö, Sweden, ORS Consulting is a risk and safety consultancy dedicated to helping industrial asset owners prevent process-related accidents and improve uptime. Our mission is to provide to the point advisory services that support decision-making and optimization. COMPANY TIMELINE LOCATIONS ORS Consulting has business units and offices in Denmark , Norway , Sweden , Türkiye , Netherlands and the UK . We work as One Team by combining local presence with a strong and global team of risk and safety specialists. OUR VALUES Our Vision The preferred risk-based industrial advisory partner. Our Guiding Principles One Team Working together with cross-formed teams based on competence and availability To the Point Zero-based approach to stay focused, avoid fancy and simply deliver quality Client-oriented Creating value with long-term focus, combining expertise and excellent client service ORS Quality Policy ORS HSE Policy HOW CAN WE HELP? We are here to assist you. Please feel free to contact us with any questions, comments or inquiries you may have. We value your feedback and look forward to hearing from you. Contact us

ORS supports power and utility companies with the provision of to-the-point technical risk management and process engineering advisory and training services to achieve improved safety and operational performance. SECTORS Power and Utilities The power and utilities sector faces many challenges in terms of reducing greenhouse gas emissions and providing secure, reliable, and affordable services. ORS supports power and utility companies with the provision of to-the-point technical risk management and process engineering advisory and training services to achieve improved safety and operational performance. Some examples of project engagements Client: Combined Power Plant and Desalination Unit, United Arab Emirates Project: Technical and Operational Risk Management Training Client: Regional Power and Utility Company, Sweden Project: Technical Safety and Regulatory Compliance Support for new hydrogen production facility Client: Public Power and Utility Company in Aruba Project: Cybersecurity Risk Assessment and C-HAZOP for Power Plant Expansion Project Client: Power Plant Technology Supplier, Finland Project: Provision of Functional Safety, Process Safety and Quantitative Risk Assessment (QRA) services for multiple power plant development projects around the world Client: Power and Utility Supplier, Denmark Project: Technical Safety and Risk Analysis Support for multiple projects including offshore wind sector and hydrogen production plants Client: Electrical and Utility Supplier, Colombia Project: Provision of training: technical risk assessments, electrical HAZOP etc. Client: Multinational Engineering and Technology Company, Sweden Project: Technical Risk Management Studies for Offshore Wind Power Development Projects in Germany Client: Leading Engineering, Procurement and Construction (EPC) Company, Denmark Project: RAM Analysis, HAZOPs, HAZIDs and Technical Safety Support for multiple Offshore Wind development projects in Americas, Asia, and Europe. available commercial tools: PHAST PHA-PRO Miriam RAM Bow-tie XP Aspen HYSYS Flaresim Symmetry Process Simulation CARA Fault Tree available NON-commercial tools: Onshore QRA Software for Risk Integration (ISO curves / F-N curves) Offshore QRA Software Consequence Modelling Hazardous Area Classification (ORS-HAC) Thermodynamic/Process Studies ORS also has access to an extensive in-house data collection in addition to subscriptions to recognized national/international data sources. Find Out How We Can Work Together CONTACT US

ORS SERVICES Industrial Risk and Safety Solutions to Improve Asset Performance Up ORS Consulting supports asset owners, engineering contractors, system and equipment suppliers with industrial risk and safety services. We support our clients to avoid accidents, and to enhance availability and production. Our heritage comes from the petrochemical industry. Today, we support a variety of industries including oil and gas, renewables, chemical industries, manufacturing and fish farming. ORS delivers services in all asset lifecycle phases, including concept selection, front end engineering, detailed design / realization phase, operational phase as well as decommissioning. Tailored Support for Your Project Needs concept selection front end engineering detailed design/ realization phase operational phase decommissioning Tailored Support for Your Project Needs Third-party studies We allocate the best team to solve the challenge. It can be a specific problem that needs to be solved or a third-party verification activity. We have extensive experience with a broad range of methods, tools and industry practice, to ensure efficient and successful project execution. Integrated advisory We support clients working as an integral part of the client organization. With this set-up, a team from ORS supports can take ownership for parts- or the entire risk and safety scope for a project development, or asset, using our own project delivery model, tools and quality management system. Contracting ORS has multiple specialists that can support a client organization. Our resources are available part-time, full-time or on demand. Training We provide training courses across all our service areas. Combining extensive experience and industry know-how, our specialists can provide fit-for-purpose training courses for any level at a client’s organisation. services Technical risk management is the set of activities to identify hazards and assess and manage risks to an acceptable level. Technical Safety and Risk Management LEARN MORE Button Process Safety ensures the protection and resilience of the process design against failures. Functional safety covers instrumented safety systems, and ORS supports all phases of functional safety management. Process Safety and SIL LEARN MORE Button Cybersecurity in industrial environments protects OT and ICS from cyber threats that could disrupt operations, compromise safety, or impact critical infrastructure. It ensures resilience through risk mitigation, security measures, and compliance with standards like IEC 62443, enabling safe and reliable industrial processes. ICS/OT CYBERSECURITY LEARN MORE Button A reliable system is one that will function appropriately with a minimum need for maintenance or repair. We support projects and operating assets with uptime and availability assessments. System Reliability and Availability LEARN MORE Button Barrier Management is crucial for preventing accidents and risks throughout an asset's lifecycle. We specialize in these areas, offering services like barrier strategy development, bow-tie analysis, risk-based maintenance, etc. Barrier Management LEARN MORE Button Physical security is an essential pillar of any risk management framework. In a world where threats to infrastructure, facilities and people can range from theft and vandalism to sabotage and hostile actors, a proactive and well-designed physical security approach ensures your organisation is prepared, resilient and protected. Physical Security LEARN MORE Button Safety management is vital for all projects and assets. ORS offers expertise from concept to operation, helping you navigate complex regulations and technical risk management. Safety and Compliance LEARN MORE Button Chemical & Process Engineering involves the design, optimisation and operation of industrial scale processes for the safe manufacture of useful products and materials. Chemical & Process LEARN MORE Button Working Environment and Human Factors management is committed to establishing and overseeing conditions that promote health, comfort, and operational efficiency for all personnel throughout the entire facility lifecycle. workIng envIronment and HUMAN FACTORS LEARN MORE Button Find Out How We Can Work Together CONTACT US