ORS Consulting provides leading third-party integrity management solutions, including barrier strategy development, bow-tie analysis, risk-based maintenance, and Integrated Design Review (IDR). SERVICES Barrier Management Up Anchor 1 Barrier Management is a framework for the identification of major accident risks and continuous risk management throughout a complete asset lifecycle. Integrity management ensures that systems, operational procedures and organization perform their function effectively to avoid incidents and accidents. Integrity management comprises a variety of risk assessments, including barrier management, integrated design reviews, risk-based maintenance and obsolescence management. ORS Consulting is a leading third-party integrity management solutions provider. We are helping businesses and facilities perform barrier strategy development, bow-tie analysis, risk-based maintenance and Integrated Design Review (IDR), amongst others. Barrier Management Related Studies Barrier Strategy Development Barrier strategy development involves establishing a strategy for how a project or asset operation will manage the accident risk, and to ensure that barriers are designed and maintained to ensure an acceptable risk level. Bow-tie Analysis Bow tie diagrams are powerful tools for managing major accident hazards and communication of key risk drivers. It typically involves creating a bow-tie diagram, which illustrates the chain of causes and consequences related to a hazard, and its barriers and mitigating measures. Performance Standards Performance standards are requirement specifications established for barrier functions or elements, as input for design and operation of a system. Among others, performance standards can give requirements related to reliability, maintenance and operability. Risk-based Maintenance Risk-based maintenance (RBM) is a maintenance strategy that prioritizes risk-sensitive systems and machinery, applicable for all industries. An RBM helps businesses to plan maintenance processes based on the probability of failure, possible effects (consequences), and calculated costs. Barrier Management System Implementation Barrier management system implementation involves establishing and maintaining barriers in a facility so that risks can be managed and operational excellence can be achieved. It involves establishing technical, operational and organizational barriers against major accidents or incidents, and ensure that the barriers are maintained throughout the asset lifecycle. Optimization of Test Intervals The probability of failure of machinery or safety critical systems largely depends on the frequency of testing or preventive maintenance. Optimization of test intervals involves determining the optimum maintenance or test tasks that ensures high reliability, and at the same time minimizing downtime. Optimization of test intervals is typically performed in conjunction with performance monitoring of Safety Instrumented Systems. Obsolescence Management Obsolescence describes a situation in which a part, equipment, or service is no longer available even when it is still needed. Obsolescence management helps organizations to forecast, monitor, and plan when they are at risk of having obsolete parts, service, or equipment. It helps to reduce the risks associated with obsolescence. Root Cause Analysis Root cause describes a factor that caused a non-conformance in a system, component, or organization. A root cause analysis (RCA) is a problem-solving process that is used to identify these factors and provide approaches to preventing them. It may also provide a means of responding to them. Integrated Design Reviews (IDR) Integrated Design Review (IDR) is a method used to scrutinize project interface and is efficient for projects and assets with multiple stakeholders. This methodology focuses on the functionality of an integrated facility, and it aims to mitigate risks and ensure safe and efficient operations in these facilities. Risk-based Inspection (RBI) Risk-based inspection (RBI) involves quantitative and qualitative assessment of the probability of failure, possible consequences, and costs associated with systems and machinery. The information obtained from this assessment helps businesses to determine design flaws and potential damages, as well as the location of possible dangers resulting from failures. Find Out How We Can Work Together CONTACT US Latest Insights Har ni kontroll på era säkerhetsinstrumenterade funktioner (SIF:er)? Anpassning av HAZOP-studier för batchprocesser Processriskanalys (PHA) - Översikt över tillgängliga tekniker och när de ska tillämpas MORE INSIGHTS

SECTORS DEFENCE ORS Consulting supports industry leading companies in the defence industry with risk and safety studies. Our support ensures a safe and reliable manufacturing process, and high reliability and quality of products and systems. Our subject matter experts have extensive experience with defence industry standards and guidelines. How do We add Value? Some of the services that we can provide to add value for clients and projects in the defence industry: For hazardous production facilities, e.g. with a fire, explosion or environmental risk, ORS supports with quantitative risk assessments (e.g. related to Seveso directive), hazard identification and barrier management processes to ensure an acceptable risk for personnel (at the site and neighbours), environment, asset and reputation; Process safety support for production facilities. ORS can support with process engineering, Process Hazard Analysis (PHA) studies and Reliability, Availability and Maintainability Analysis (RAM) to ensure a safety and reliable production process; Reliability and availability, including elements such as Failure Mode, Effects and Criticality Analysis (FMECA), Mean Time Between Failure (MTBF) and Fault Tree Assessments (FTA) for development of new products and systems; Functional safety management for products and systems including instrumented safety functions. ORS has extensive experience with applying standards such as IEC 61508 for multiple industries; System safety and risk management support for projects and product developments; Integrated Logistics Support (ILS), supporting projects to optimize maintenance and reduce lifecycle cost. Find Out How We Can Work Together CONTACT US

Stay ahead with ORS Consulting's events. Discover upcoming webinars and workshops on technical safety and risk management. Visit our Events page to learn more. ORS CONSULTING webinars Below you can find information and recordings from previous webinars held by ORS Consulting. To widen your knowledge about technical risk, process safety, and risk management please also see our insights page , full of articles covering many topics. SEVESO-DIREKTIVET: UPPFYLL KRAVEN MED RÄTT RISKANALYS FÄRDIG 6 maj 2025 kl. 12:00:00 TITTA PÅ REPRIS Why ICS/OT Cybersecurity Must Be Part of Industrial Risk Management FINISHED 27 mars 2025 kl. 10:00:00 WATCH REPLAY Introduction to RAM studies - how can it add value? Finished 12 december 2024 kl. 13:00:00 WATCH REPLAY Flare System Dynamic Modelling - Approaches & Values Finished 24 september 2024 kl. 10:00:00 WATCH REPLAY Using Fault Tree Analysis for SIL determination Finished 5 juni 2024 kl. 09:00:00 WATCH REPLAY Introduction to Barrier and SECE Management Finished 7 mars 2024 kl. 11:00:00 WATCH REPLAY Essentials for confident and effective HAZOP participation Finished 29 september 2023 kl. 09:00:00 WATCH REPLAY The Difference Between Process Safety Time and SIF Response Time Finished 15 juni 2023 kl. 09:00:00 WATCH REPLAY FMEA, FMECA AND FMEDA: Understanding the key differences Finished 14 april 2023 kl. 09:00:00 WATCH REPLAY Safety Integrity Level. What is SIL and when it is required Finished 2 mars 2023 kl. 10:00:00 WATCH REPLAY Functional Safety Assessment- Operations: waste of time or value creation? Finished 1 april 2022 kl. 08:00:00 WATCH REPLAY 5 essentials for understanding process HAZOPs Finished 28 maj 2021 kl. 08:00:00 WATCH REPLAY

ORS Consulting is one of the leading advisories within industrial risk management in Norway, we have supported clients in the oil and gas, and land-based industry, as well as in renewables, defense, and transportation sectors. LOCATIONS ORS Consulting in Norway ORS Consulting is one of the leading advisories within industrial risk management in Norway. Since 2009, we have supported clients in the oil and gas, and land-based industry, as well as in renewables, defense, and transportation sectors. We have extensive experience with relevant regulations from government agencies such as Petroleum Safety Authority (PTIL), the Norwegian Directorate for Civil Protection (DSB) and the Norwegian Maritime Authority (Sjøfartsdirektoratet). Some examples of the ORS Consulting contribution to the Norwegian industry during the last decade: Supporting both operators and engineering companies with integrated risk advisory for major field developments on the Norwegian Continental Shelf; Assisted new industrial establishments with implementing a risk management framework according to governing regulations such as Major Accident Regulation (Storulykkesforskriften); Conducted numerous risk analyses, including process-related reviews (e.g. HAZOPs), uptime/availability, RAM studies, barrier management activities, SIL/Functional safety studies and consequence modelling. We opened our first office at Fornebu/Oslo in 2012. The office was later re-located to Lysaker/Oslo. In 2016, we opened our second office at Jåttåvågen/Stavanger. We are always looking for talented professionals for our team and offices in Scandinavia. Get in touch via our career page . Morten Nilstad Pettersen Managing Director, ORS Stian Gundersrud Department Manager, ORS Oslo Per Ståle Larsen Country Manager, ORS Norway Rikard Davidsen Department Manager, ORS Stavanger NORWAY Morten Pettersen | Managing Director ( General Inquiries ) +47 97 73 17 80 mnp@ors-consulting.com Per Ståle Larsen | Country Manager +47 990 28 688 psl@ors-consulting.com Lilleakerveien 4A, 0283 Oslo, Norway COMPANY REG NO. 911738414 OSLO, NORWAY Stian Gundersrud | Department Manager sgu@ors-consulting.com Lilleakerveien 4A, 0283 Oslo, Norway COMPANY REG NO. 911738414 STAVANGER, NORWAY Rikard Davidsen | Department Manager +47 91710199 rda@ors-consulting.com Jåttåvågveien 7 4020 Stavanger, Norway COMPANY REG NO. 911738414 FIND OUT HOW WE CAN WORK TOGETHER CONTACT US

ORS Consulting, a leading risk management advisory in Scandinavia, has supported Denmark's oil and gas, renewables, chemicals, and pharmaceuticals industries since 2009. LOCATIONS ORS CONSULTING IN DENMARK ORS Consulting is one of the leading industry risk management advisories in Scandinavia. We have supported our Clients in Denmark since the company was founded in 2009. In more than 12 years, we have expanded our client portfolio and support to multiple industries in Denmark including oil and gas, renewables, chemicals as well as pharmaceuticals industries. Some examples of the ORS projects in Denmark in the recent past: Continuous support for the Danish oil and gas industry covering both onshore- and offshore-related assignments within a broad range of industrial risk advisory. Some examples cover HAZOPs, HAZIDs, Functional Safety, SIL, Reliability Assessments, RAM assessments, qualitative- and quantitative risk assessments, etc. Collaborating with leading companies in Denmark within the offshore wind sector for the delivery of local- and global offshore wind power projects. ORS scope typically covers technical safety-, RAM assessments, functional safety, and SIL assessments. Conducting qualitative and quantitative technical risk & safety studies for a broad range of onshore Clients covering from public institutions to data centers. Provision of training and competence development services for asset operations covering offshore- and onshore personnel Our office in Denmark is located in Esbjerg. ORS plans to grow as an independent risk management advisory in Denmark based on long-term relations and sustainable business principles. We are always looking for talented professionals for our team and office in Denmark. Get in touch via our career page . Matias Wulff Country Manager, ORS Denmark ESBJERG, DENMARK Matias Wulff + 45 93 96 31 48 mpw@ors-consulting.com Borgergade 66 ST TH, 6700 Esbjerg, Denmark COMPANY REG NO. 41765690 FIND OUT HOW WE CAN WORK TOGETHER CONTACT US

SECTORS LIFE SCIENCE ORS Consulting supports the life science sector with specialist engineering, process safety and risk management services across pharmaceuticals, biotechnology, and other highly regulated process industries, including food and distilled spirits. ORS brings experience across multiple sectors, supported by well‑established risk management practices, such as oil and gas. We recognise both the parallels with, and the important distinctions from, these industries, and our goal is to deliver rigorous risk management that is genuinely suited to the operator’s risk profile and maturity. How do We add Value? ORS delivers a comprehensive range of process safety and compliance services across the life science sector, from initial hazard assessments to compliance related support and integrated advisory for operational phases. Our core service offerings include: Hazardous Area Classification: Risk assessments for facilities handling flammable substances, as well as development of Hazardous Area Classification drawings, zone schedules, and ignition source registers. The work also includes supporting clients to comply with relevant regulations such as ATEX directives, DSEAR (UK), etc. Process and functional safety : ORS supports clients with process safety studies from the initial HAZOP in concept stage until detailed design, including the link to further SIS lifecycle activities further down the line, such as SIL allocation, SRS, SIL compliance, in accordance with IEC 61508 / IEC 61511. Regulatory Compliance Support: Many life science facilities hold Seveso/COMAH-listed substances above threshold quantities, carrying defined legal obligations. ORS supports operators preparing necessary documentation for audits and new expansions, e.g., by conducting HAZID, updating consequence modelling, etc. Reliability, Availability & Critical Spares: RAM analysis and FMECA for production-critical equipment. Unplanned downtime in life science manufacturing carries significant commercial and reputational consequences as the sites are often classified as socially critical infrastructure. ORS support operators in identifying reliability vulnerabilities, defining critical spares requirements, and structuring maintenance regimes to safeguard production performance. Process Safety Training: To build genuine process safety competence within our clients' organisations, ORS develops site-specific process safety training for teams at all levels, from shift operators to senior management, focused on building genuine competence within process safety. Read more about our experience within the Life Science sector below Pharmaceuticals The pharmaceutical and biotechnology industries are governed by the Good Manufacturing Practice (GMP) framework, where product quality, patient safety, and regulatory compliance are inseparable from systematic control of technical and process‑related risks. Safety‑critical systems must not only function correctly, but also be documented, traceable, testable, and governed throughout their lifecycle. Failures, undocumented changes, or poorly controlled modifications to process, automation, or protection layers can lead to batch rejection, regulatory findings, or production shutdowns. Consequently, functional safety activities and process risk studies such as Hazard and Operability (HAZOP) and Layers of Protection Analysis (LOPA) studies must integrate seamlessly with GMP processes, including validation, deviation management, and change control. Some examples of project engagements Client: World-leading biopharmaceutical company, Denmark Project: Integrated advisory within functional safety, supporting the client from the hazard and risk assessment phase, SIL allocation, SRS, SIL Verification and auditing. Client: Specialised life‑science manufacturing company, Norway Project: Process safety and HSE support for a facility extension, supporting the client with early hazard identification, prepare and plan HAZOP activities, and manage environmental and operational risks alongside project execution. Spirit and Distilleries The distilled spirits industry handles flammable inventories at a scale that places squarely within scope for regulatory scrutiny. Whether you operate a single malt distillery, a large-scale grain plant, or a central blending and bottling facility, the obligations under ATEX (EU) / DSEAR (UK), Seveso/COMAH, and the associated HSE inspection are enforced. Process and functional safety are an effective way to support the distilled spirits sites in understanding and meeting their regulatory obligations. ORS delivers practical, site‑focused studies covering HAZIDs, HAZOPS, SIL/LOPA, ATEX/DSEAR, hazardous area classification and Seveso/COMAH, tailored to the realities of the distilled spirits industry. Some examples of project engagements Client: Ethanol production site, Sweden Project: Support with updating risk assessments as part of Seveso 5-year audit (including HAZID and consequence assessments), as well as training within the process safety domain. Food Industry Production of food is often not associated with hazardous substances; however, the supporting systems (e.g., cooling system) may consist of hazardous chemicals that can pose a risk for both personnel, quality, environment and asset. Understanding the key hazards contributing to the overall risk picture beyond the main process is essential for ensuring a safe plant. HACCP (Hazard Analysis and Critical Control Points) is commonly used in the food industry to identify, evaluate, and control food safety hazards throughout the production process. It addresses biological, chemical, and physical hazards and defines critical control points (CCPs) where control measures are required to ensure food safety. HACCP is recognised as a basis for food safety management within EU and international food regulations. Some examples of project engagements Client: Food producer, Norway Project: Supporting client with hazard identification and consequence modelling of the production plant. Find Out How We Can Work Together CONTACT US

In January 2024, ORS Consulting expanded its presence beyond Western Europe, establishing a dynamic new hub in Türkiye. We are committed to developing top-tier risk and safety advisory, supporting our clients in Western Europe, and adding value to high-priority clients in Türkiye and the region. LOCATIONS ORS CONSULTING IN TÜRKIYE Bridging Between Europe and the East In January 2024, ORS Consulting expanded its presence beyond Western Europe, establishing a dynamic new hub in Türkiye. Türkiye's growing industry, booming economy, and vibrant young talent make it an attractive location for our continued global growth. With its strategic position as a gateway to Central Asia and the Middle East, Türkiye offers unparalleled opportunities for collaboration and innovation. At ORS Consulting Türkiye, we are committed to developing top-tier risk and safety advisory, supporting our clients in Western Europe, and adding value to high-priority clients in Türkiye and the region. Our top-quality services include: Supporting both operators and engineering companies with integrated advisory for major field developments Assisting new industrial establishments with implementing a risk management framework according to governing regulations Conducting numerous risk analyses, including process-related reviews (e.g. HAZOPs), up-time/availability, RAM studies, barrier management activities, SIL/Functional safety studies and consequence modelling Gulay Basova Country Manager, ORS TÜRKIYE IZMIR, TÜRKIYE Gülay Başova +905373377212 +4746825632 gba@ors-consulting.com HALKAPINAR MAH. 1203/11 SK. NO: 5 -7 İÇ KAPI NO: 152 Megapol Carsi Kule Plaza KONAK/ İZMİR FIND OUT HOW WE CAN WORK TOGETHER CONTACT US

Technical safety and risk management is the set of activities to identify hazards and assess and manage risks. Technical risk management is a fundamental part of all sectors and industries where incidents and accidents can cause harm to personnel, environment, asset, or reputation. SERVICES Technical Safety and Risk Management Up Anchor 1 Technical risk management is a set of activities to identify hazards and assess and manage risks. Technical risk management is a fundamental part of all sectors and industries where incidents and accidents can cause harm to personnel, environment, assets, or reputation. The main activities within this area are: Technical risk advisory throughout a project or asset operation to ensure that safety design minimizes harm to personnel, environment, and asset, and meets regulatory requirements; Risk-based workshops for identification of hazards in a multi-discipline and collaborative environment; Performing risk analysis to establish risk picture, based on the frequency and consequence assessment, and benchmark with acceptance criteria. Technical Safety and Risk Related Studies Escape, EvaCuation, and Rescue (EER) Escape Evacuation and Rescue (EER) strategy and assessments ensure that a facility is designed and operated away allowing safety for personnel during the evacuation, availability of muster areas, the quick rescue of personnel, and controlled evacuation. Quantitative Risk Assessments (QRA) A QRA is a method to calculate and evaluate the frequency and consequences of the major accident hazards for a facility. The resulting risk picture is benchmarked with acceptance criteria and is efficient for ensuring a safe and robust design, as well as compliance with regulatory requirements. CFD is used at ORS for assessing the consequences of hazardous events such as fire, explosion, and toxic dispersion as part of QRAs. Gas Dispersion, Explosion and Fire Assessment Process plant layout and mechanical design need to be robust to minimize escalation if a loss of containment occurs. ORS has state of the art software solutions (such as CFD) and expertise for the assessment of dispersion, explosion, and fire (pool, jet, and spray fires) and the ability to interface this with blowdown and flare assessment to minimize the likelihood of vessel rupture in the event a release occurs elsewhere on the plant. Learn more > Safety Case A safety case is a demonstration of how health and safety hazards are managed for a facility. This requires systematic identification of hazards, evaluation of consequences and implementation of risk reducing measures to meet As Low As Reasonably Practicable (ALARP) principles. HAZID/HAZOP Hazard Identification (HAZID) and Hazard and Operability (HAZOP) studies are structured multi-discipline workshops in order to identify hazards for a system design, evaluate the consequences for safety, environment, and asset, and identify measures to reduce the risk. A HAZOP is typically performed for process systems with a potential for loss of containment. Learn more> EHAZOP/CHAZOP Electrical Hazard and Identification (EHAZOP) is similar to HAZOP with regards to identifying hazards and operability issues. However, unlike HAZOP, EHAZOP focuses only on electrical systems. A Control Hazard and Operability Study (CHAZOP) covers programmable control systems (e.g. PLC and SCADA) and IT systems. SAFOP/SIMOPS A Safety and Operability Study (SAFOP) is commonly carried out prior to operations to identify hazards, evaluate consequences and define mitigating measures to avoid accidents and incidents. WHAT-IF WHAT-IF analysis is a structured analytic technique used to determine what systems, activities, operations can go wrong in a facility based on different scenarios. Based on the answers to the what-if questions, a facility can then judge the consequences of the activities that can go wrong. Environmental Risk Assessment (ENVID) An ENVID study helps facilities identify and manage risks related to harm to the environment. It is effective for analyzing waste storage and disposal, emissions, discharge of hazardous substances, as well as the environmental impact of operations. Learn more > Working Environment Health Risk Assessment (WEHRA) A WEHRA study assesses the risks to the health and safety of persons working in a facility based on factors such as noise, vibration, illumination, harsh weather or exposure to chemicals or harmful substances. A WEHRA is efficient to identify measures to achieve an acceptable working environment. Find Out How We Can Work Together CONTACT US Latest Insights Har ni kontroll på era säkerhetsinstrumenterade funktioner (SIF:er)? Processäkerhet och SIL 3 min läsning Anpassning av HAZOP-studier för batchprocesser Processäkerhet och SIL 4 min läsning Processriskanalys (PHA) - Översikt över tillgängliga tekniker och när de ska tillämpas Processäkerhet och SIL 7 min läsning MORE INSIGHTS

HydDown Rigorous Demo Tool HydDown is a program for vessel filling and discharge simulations, primarily intended for hydrogen cylinders but also applicable to other pure gases and non-condensing mixtures, such as dry natural gas. It calculates the time-dependent vessel response in terms of pressure and temperature for both the fluid inventory and the vessel's metal wall.

Connect with our expert team for technical safety and risk management services at ORS Consulting. Visit our Contacts page to get in touch and learn more. ORS CONSULTING CONTACTS STOCKHOLM, SWEDEN Isabella Bergström | Department Manager +46 73 404 18 72 ibe@ors-consulting.com Gävlegatan 12B, 113 30 Stockholm, Sweden COMPANY REG NO. 559330-0949 ABERDEEN, UNITED KINGDOM Neill Renton | Country Manager T: +44 (0)1224-042882 M: +44 (0)7388-948667 nre@ors-consulting.com Louis C. Findlay | Department Manager lcf@ors-consulting.com Citibase Aberdeen Hill of Rubislaw, AB15 6BL Aberdeen, United Kingdom Registered in Scotland: SC541316 STAVANGER, NORWAY Rikard Davidsen | Department Manager +47 91 71 01 99 rda@ors-consulting.com Jåttåvågveien 7 4020 Stavanger, Norway COMPANY REG NO. 911738414 MALMÖ, SWEDEN Katarina Linde | Country Manager +46 73 62 53 705 kal@ors-consulting.com Södergatan 14, 211 34 Malmö, Sweden COMPANY REG NO. 559330-0949 GLASGOW, UNITED KINGDOM Alessandro Capaldi | Department Manager T: +44 (0)1412-225930 aca@ors-consulting.com 126 West Regent Street, Glasgow G2 2RQ LONDON, UNITED KINGDOM Sam Richardson | Department Manager T: +44 (0) 7989 977 439 sar@ors-consulting.com 201 Borough High St, London SE1 1JA ESBJERG, DENMARK Matias Wulff | Country Manager +45 93 96 31 48 mpw@ors-consulting.com Borgergade 66 ST TH, 6700 Esbjerg, Denmark COMPANY REG NO. 41765690 IZMIR, TÜRKIYE Gülay Başova | Country Manager +90 537 337 72 12 +47 46 82 56 32 gba@ors-consulting.com Halkapinar Mah. 1203/11 Sk. No: 5 -7 Ic Kapi No: 152 Megapol Carsi Kule Plaza Konak/ Izmir UTRECHT, NETHERLANDS Onur Ipek | Country Manager +31 6 15 83 11 26 oni@ors-consulting.com St. Jacobsstraat 123, 3511BP Utrecht Netherlands OSLO, NORWAY Morten Pettersen | Managing Director (General Inquiries) +47 97 73 17 80 mnp@ors-consulting.com Per Ståle Larsen | Country Manager +47 990 28 688 psl@ors-consulting.com Stian Gundersrud | Department Manager sgu@ors-consulting.com Lilleakerveien 4A, 0283 Oslo, Norway COMPANY REG NO. 911738414 Contact Us We are here to assist you. Please feel free to contact us with any questions, comments, or inquiries you may have. We value your feedback and look forward to hearing from you. Connect directly with our offices representatives: Norway Sweden Denmark United Kingdom Türkiye Netherlands First name* Last name Email* Company Role Write a message I agree to ORS Consulting Privacy Policy * Submit

Ensure your ICS and OT systems are secure with robust cybersecurity measures. Discover how ORS can help safeguard your operations and protect critical infrastructure from cyber threats. SERVICES ICS/OT Cybersecurity Up Anchor 1 As industrial operations become more connected, the risk of cyber threats targeting critical systems increases. Asset owners must ensure that their Industrial Control Systems (ICS) and Operational Technology (OT) are designed, maintained, and operated to minimize cybersecurity vulnerabilities. OT/ICS cybersecurity requires a structured approach to protecting industrial systems from cyber threats that could lead to safety or operational disruptions. It focuses on safeguarding critical infrastructure by implementing security measures to prevent, detect, and mitigate cyber incidents that could compromise industrial processes. In industrial environments, cyber safety plays a crucial role alongside cybersecurity. While cybersecurity broadly addresses the protection of data, networks, and systems, cyber safety specifically focuses on preventing physical harm, environmental impact, and operational hazards caused by cyber incidents. In industries such as oil and gas, chemicals, and manufacturing, where cyber threats can directly lead to fires, explosions, or equipment failures, cyber safety ensures that security measures align with safety-critical objectives. A key element of OT/ICS cybersecurity and cyber safety is ensuring the resilience of safety-critical systems. This includes Cybersecurity Risk Assessments (CSRA), defining security requirements, and implementing protective measures in line with standards such as IEC 62443. Cyber threats impacting safety systems, such as Emergency Shutdowns (ESD) or Safety Instrumented Systems (SIS), must be identified and mitigated to ensure safe and reliable operations. ICS/OT cybersecurity Related Studies initial cybersecurity risk assessment An initial cybersecurity risk assessment involves identifying and evaluating cyber threats to Industrial Control Systems (ICS). It defines the System under Consideration (SuC), assesses vulnerabilities, and determines the required Security Level Target (SL-T) based on risk. This assessment lays the foundation for implementing appropriate cybersecurity controls to mitigate risks to an acceptable level. Both applicable for legacy and new projects. Detailed cybersecurity risk assessment A detailed cybersecurity risk assessment builds on the initial assessment by performing an in-depth analysis of threats, vulnerabilities, and potential attack scenarios for the System under Consideration (SuC). It evaluates the effectiveness of existing security measures, identifies gaps, and determines specific countermeasures to achieve the required Security Level Target (SL-T). This assessment ensures a risk-based approach to cybersecurity, aligning protections with operational and safety requirements. Vulnerability assessment A vulnerability cybersecurity assessment identifies and evaluates weaknesses in Industrial Control Systems (ICS) that could be exploited by cyber threats. It involves analyzing system architecture, configurations, and known vulnerabilities in hardware, software, and network components. The assessment helps prioritize remediation actions to reduce exposure and improve the overall cybersecurity posture. gap/compliance assessment A GAP/compliance assessment evaluates how well an organization's security measures align with relevant standards or internal policies. It identifies deficiencies (gaps) in policies procedures, and technical controls compared to required security levels. Security level allocation Security level allocation involves assigning a required Security Level Target (SL-T) to Industrial Control System (ICS) components based on identified cyber risks. It ensures that each system, zone, or conduit meets the necessary security requirements to mitigate threats. This process aligns cybersecurity protections with operational and safety needs while maintaining a defense-in-depth approach. A Cybersecurity Requirement Specification (CSRS) defines the security controls and measures needed to protect an Industrial Control System (ICS) based on its identified risk and Security Level Target (SL-T). It ensures that cybersecurity requirements are systematically documented, similar to the Safety Requirement Specification (SRS) in IEC 61511 for functional safety. Find Out How We Can Work Together CONTACT US Latest Insights Har ni kontroll på era säkerhetsinstrumenterade funktioner (SIF:er)? Anpassning av HAZOP-studier för batchprocesser Processriskanalys (PHA) - Översikt över tillgängliga tekniker och när de ska tillämpas MORE INSIGHTS

Since 2009, ORS Consulting has been a leading UK advisory firm in industrial risk management, supporting sectors like oil, gas, chemicals, renewables, defense, and transportation, with expertise in UK regulations and collaboration with HSE. LOCATIONS ORS CONSULTING IN United Kingdom ORS Consulting is a leading advisory firm in industrial risk management in the UK. Since 2009, we have supported clients across various sectors including oil and gas, downstream, chemicals, renewables, defense, and transportation. We have extensive experience with relevant UK regulations and in working with Government Regulators including the Health & Safety Executive (HSE). Some examples of ORS Consulting’s contributions over the past decade include: Supporting both operators and engineering companies with integrated risk advisory for major field developments and existing operating assets in the North Sea; Assisting industrial establishments with implementing a risk management framework according to governing regulations such as the Control of Major Accident Hazards (COMAH) Regulations; Conducting numerous risk analyses, including process-related reviews (e.g., HAZOPs), process safety times, uptime/availability, RAM studies, barrier management activities, Thorough Reviews, QRAs, SIL/Functional safety studies, and consequence modelling. Our dedicated process engineering and process safety team use HYSYS, UniSim and SLB's Symmetry to solve complex process performance issues. We opened our first office in Aberdeen in 2017 and in 2024, we expanded with a second office in Glasgow. In 2025, we expanded further with a new office in London. We are always looking for talented professionals to join our team and offices in the UK. Get in touch via our career page . Neill Renton Country Manager, ORS UK Sam Richardson Department Manager, ORS London Louis C. Findlay Department Manager, ORS Aberdeen Alessandro Capaldi Department Manager, ORS Glasgow ABERDEEN, UNITED KINGDOM Neill Renton | Country Manager T: +44 (0)1224-042882 M: +44 (0)7388-948667 nre@ors-consulting.com Louis C. Findlay | Department Manager lcf@ors-consulting.com Citibase Aberdeen Hill of Rubislaw, AB15 6BL Aberdeen, United Kingdom Registered in Scotland: SC541316 GLASGOW, UNITED KINGDOM Alessandro Capaldi | Department Manager T: +44 (0)1412-225930 aca@ors-consulting.com 126 West Regent Street, Glasgow G2 2RQ LONDON, UNITED KINGDOM Sam Richardson | Department Manager T: +44 (0) 7989 977 439 sar@ors-consulting.com 201 Borough High St, London SE1 1JA FIND OUT HOW WE CAN WORK TOGETHER CONTACT US