ICS automation incident intelligence
Find what you’ve been missing. Stay ahead of what comes next.
20+ years
tracking automation incidents
World's largest
record of ICS automation incidents
Engineering-led
analysis, not network-security monitoring
Direct access to Joe Weiss
a licensed PE who has testified before Congress
Turn hidden automation incidents into decisions.
- 01Recognize
Workshop onboarding identifies patterns your organization may have missed.
- 02Compare
Put your experience in context using ACS incident knowledge across sectors and geographies.
- 03Stay current
Receive relevant incident intelligence, notifications, reviews and expert access all year.
Why it matters
Automation incidents rarely look like incidents.
A year of incident intelligence.
A yearlong service that starts on-site with your team and draws on more than 20 years of incident data. Pricing is based on the size of your organization.
- 01The Incident Identification Workshop, to onboard your team
- 02The ACS annual incident report
- 03Comparison with incidents in your sector and geography
- 04Significant-event notifications on incidents, responses, vendors, regulators, and insurers
- 05Periodic reviews that keep you current as new incidents emerge
- 06Year-round questions by phone, email, and video
How the year runs.
- 01
Scope and priorities
Agree the systems, sites, and priorities for the year.
- 02
Workshop onboarding
The Incident Identification Workshop trains your team, on-site, to recognize automation incidents.
- 03
Findings and baseline
Documented findings and root-cause patterns become your baseline for the year.
- 04
Annual intelligence and report
The ACS annual incident report, with how you compare to incidents in your industry and geography.
- 05
Periodic reviews
Regular check-ins that keep you current as new incidents and responses emerge.
- 06
Notifications and expert access
Significant-event notifications, and availability by phone, email, and video for questions.
Organizations that operate, insure, regulate, design, or support critical infrastructure.
- Operate
- Utilities, water, oil and gas, chemical, manufacturing, transportation, and other operators responsible for the process.
- Insure
- Insurers and risk teams who need to know whether a loss was an automation incident or a cyberattack.
- Regulate
- Agencies and industry bodies that oversee safety, reliability, and incident reporting.
- Design
- Automation and equipment vendors who can learn from how their systems behave in the field.
- Support
- Engineering firms, integrators, and consultants who support critical-infrastructure operations.
Identifying Automation Incidents Behind a 3% Productivity Opportunity at a Major Industrial Facility
The most significant sources of operational loss were ICS automation issues, not cyberattacks.
- Problem
- A facility producing about $1 billion a year had unexplained downtime, inconsistent throughput and recurring equipment issues.
- Finding
- Monitoring raw sensor signals surfaced inoperable and uncalibrated sensors, improperly ranged instruments and controller tuning errors that operators could not see.
- Consequence
- Those automation incidents added up to an estimated 3% of lost production: tens of millions of dollars in potential additional output.
Every facility is different, and not every site will find the same opportunity.
Questions about the Annual Service.
What's included over the year?
The Incident Identification Workshop as onboarding, the ACS annual incident report, comparison with your sector and geography, significant-event notifications, periodic reviews, and year-round availability by phone, email, and video.
How does the Annual Service relate to the Workshop?
The Annual Service begins with the Workshop, then continues the work all year. The Workshop can also be booked on its own as a lower-commitment way to test the ACS approach.
What affects the cost?
Pricing is based on the size of your organization and the systems in scope. Request a 20-minute Incident Review to get a quote and get started.
Does this replace our existing cybersecurity team?
No. Cyberattacks are real, but they are not the whole control-system risk picture. The Annual Service gives your engineering and security teams incident intelligence they can't get anywhere else, and complements your cybersecurity program rather than replacing it.
Not sure whether the Annual Service fits?
Bring us what you're seeing in a 20-minute Incident Review. ACS will reply within one business day to set up a short conversation about your incidents, and whether the Annual Service is the right fit.
What happens next
- 01
We reply
ACS reviews your request and replies within one business day.
- 02
You pick a time
Choose a slot for the 20-minute conversation, right after you submit or from our reply.
- 03
You get a clear answer
Leave knowing whether the Workshop, the Annual Service, or neither fits, and what the next step would be.