ClearPath
Cybersecurity Consulting

OT Security Consulting From People Who’ve Worked in Your Environment

Our team has been in every nuclear power generation plant in the United States and oil and gas facilities worldwide. We know what operational security requires because we’ve implemented it.

NRC Guidance Contributors Every US Nuclear Plant Global Field Experience Veteran-Owned
Schedule a Consultation View Our Services
Who We Are

Field Experience Meets Regulatory Depth

Our team has deployed cybersecurity programs across critical infrastructure worldwide. Every nuclear power generation plant in the United States. Hundreds of oil and gas facilities across multiple continents. Utilities and regulators in the UAE and Europe. We’ve written the policies, built the procedures, trained the staff, and supported the audits.

We’ve been boots on the ground in your environments. Offshore platforms, control rooms, generation facilities. Our staff have done the helicopter underwater egress training. We understand what safety means when it’s not a policy, it’s survival.

We also contributed to foundational NRC cybersecurity guidance, including RG 5.71, NEI 08-09, and NUREG/CR-7141. We helped shape how regulators evaluate compliance. That combination of field experience and regulatory depth means we build programs that work in operations and satisfy inspectors.

How We Help

Programs That Work in Operations and Satisfy Inspectors

Security Program Development and Deployment

We build complete, operational security programs and deploy them at scale. Not theoretical frameworks, the actual policies, procedures, workflows, and training that make programs function in industrial environments.

We’ve done this for organizations with hundreds of facilities, implementing with boots on the ground alongside plant staff who have real jobs to do. The result is programs that satisfy regulatory requirements and actually get followed.

What We Deliver

  • Complete policy and procedure packages ready for implementation
  • Program design aligned to NRC, NERC CIP, NIST CSF, or IEC 62443
  • Maturity assessments with practical improvement roadmaps
  • Field deployment support across multiple sites
  • Security architecture design for IT/OT environments

Audit Preparation and Support

We’ve supported organizations through NRC inspections, NERC CIP audits, and customer security assessments. We know what auditors focus on because we contributed to developing the inspection procedures they use.

Preparation means no surprises. We identify gaps before auditors do, build documentation that demonstrates compliance, and prepare your team to answer questions confidently.

What We Deliver

  • Pre-audit readiness assessments and gap analysis
  • Documentation review and remediation
  • Mock audits with realistic inspection scenarios
  • On-site support during regulatory inspections
  • Post-audit remediation planning

Requirements Mapping and Traceability

Regulations tell you what to do. They rarely tell you how. When multiple frameworks apply, the overlaps and conflicts can paralyze progress.

We translate regulatory requirements into specific implementation guidance for your environment, and build traceability matrices that show exactly how each control maps to each requirement, giving you audit-ready documentation and a clear view of your compliance posture.

What We Deliver

  • Regulation-to-implementation mapping for NRC, NERC CIP, NIST, IEC 62443
  • Cross-framework harmonization when multiple standards apply
  • Traceability documentation for audit defense
  • Control gap analysis with prioritized remediation

Incident Response Planning

OT incident response is not IT incident response. You can’t isolate systems and reimage. Response plans must account for safety systems, operational continuity, and notification requirements specific to your industry.

We build response capabilities designed for industrial environments. Plans your team can execute under pressure. Exercises that test real scenarios.

What We Deliver

  • OT-specific incident response plan development
  • Tabletop exercises tailored to your environment
  • Communication and escalation protocols
  • Coordination procedures for regulators and law enforcement
Where We’ve Worked

Proven Across Critical Infrastructure

Nuclear

Every nuclear power generation plant in the United States, plus facilities in the UAE and Europe. We contributed to RG 5.71, NEI 08-09, and NUREG/CR-7141, and we’ve implemented them across the industry.

Oil and Gas

Hundreds of facilities across upstream, midstream, and downstream, worldwide. Offshore platforms, pipelines, refineries, LNG terminals. On site, safety-trained, deploying programs at scale.

Utilities

Electric generation and transmission, water and wastewater across North America and internationally. NERC CIP compliance, state requirements, and coordination with regulators on evolving standards.

Manufacturing

Process and discrete manufacturing with safety-critical control systems. IEC 62443 implementation, network segmentation, and supply chain security programs.

Critical infrastructure industries worldwide

Let’s Discuss Your Situation

Every environment is different. Tell us what you’re facing and we’ll tell you honestly whether we can help.

Start a Conversation