OSS® for operational technologyData protection and storage
OT golden images, configs and recovery evidence.
Disconnect to protect every plant, line and engineering record. Golden images, PLC and HMI configurations, SCADA project files, engineering drawings and recovery evidence, held on hardware that is physically disconnected.
Offline Secure Storage®OSS® for operational technology- Protects
- The records you could not recreate
- Hardware
- Dedicated, except LUV
- When closed
- No standing network path
- Access
- Authorised, out of band, time-bound
- Hosted in
- Firevault Bunkers: Europe live, US and Middle East next
The reality
This is already happening in OT estates.
Every incident here is a matter of public record. Each one involved data that was reachable from a live network at the moment of compromise.
- Golden images off the network
Golden images and configurations are placed on hardware with no network connection while it is closed.
- Timed, governed access
Multi-factor authentication and timed-access procedures governed by the primary end user, with Vault Buddy continuity through shift changes and departures.
- Every access logged
Full audit logging of every access attempt, which can help support NIS2, the Cyber Assessment Framework and IEC 62443 evidence.
- Jaguar Land Rover: about £1.9bn.
Incident 1
- Norsk Hydro: manual operations.
Incident 2
- Colonial Pipeline: fuel supply halted.
Incident 3
See the difference
The same stolen login. Two places to keep your records.
Choose a state to see what an intruder can reach.
Contracts, accounts and recovery copies share one connected estate. One stolen login, one supplier or one mistake reaches all of it.
The records you could not recreate sit on dedicated hardware with no standing network path. Access begins outside the normal network, on an authorised out-of-band request, for a time-bound session.
How OSS helps
Disconnect to protect every plant, line and engineering record.
Golden images, PLC and HMI configurations and SCADA project files are taken off the plant network and written to dedicated RAID 1 drives inside a Firevault Bunker. When authorised engineers need access, a physical connection is created after identity verification. When the session ends, the drives disconnect.
- 01
- 02
- 03
What the guidance says
Backups that are not permanently connected.
OT security standards and national guidance both point to recovery copies kept apart from the control network.
- Industrial security, zone by zone
IEC 62443
- Keep a backup offline
NCSC
The products
Which Offline Secure Storage® fits OT estates?
Every tier is the same physical principle at a different scale. Pick the access pattern that matches how your team works.
- Physically offline between sessions.
Vault
- Ask from your registered phone and confirm it is you.
Open a session
- Work with your files for up to 120 minutes.
File Manager
- Opens on a day you choose each week, for 12 hours.
LUV
- From 20TB, growing in 20TB steps.
Storage
Use cases for OT estates
What operators take offline first.
The records that matter most, and the ones an attacker would most like to reach.
- Decommissioned plant and line records
Plants
- Superseded golden images and firmware
Images
- Historical safety case and HAZOP records
Safety
- Long-term retention of regulatory submissions
Regulators
- Closed change-control and MOC archives
Change
How to get started
From discovery call to go-live.
Understand what you need to protect and how you operate.
- 1
Understand what you need to protect and how you operate.
- 2
Select your tier, capacity and access model.
- 3
Complete KYC/AML and set up multi-factor authentication.
- 4
Data ingestion, access policy activation and ongoing support.
Why Firevault
Physics, not promises.
Every Offline Secure Storage® instance is built on the same four physical principles.
- Physical storage
Offline Secure Storage instances are held on dedicated physical hard drives, not in S3 cloud buckets, shared storage pools or multi-tenant infrastructure. Your selected data is assigned to real hardware, with dedicated RAID 1 drives providing resilience.
- Physical ownership
Each Offline Secure Storage instance is allocated to a specific customer, with dedicated physical capacity and clearly defined ownership. Your data is not pooled, commingled or held within a shared storage estate.
- Physical control
Access begins outside the normal network path. An authorised out-of-band command, such as SMS, controls the physical Layer 1 connection to your #OSS instance. When access is not required, that network path is physically disconnected.
- Physical security
Your #OSS hardware is housed in carefully selected, professionally managed data centres with layered physical security, resilient power and environmental controls. Access is tightly controlled using three-factor authentication, including biometric identification, supported by 24/7 monitoring, restricted access zones and a complete audit trail.
Explore more
Related routes.
Questions
- OT recovery
- Gold copy backups
- Board records
- Ransomware-proof recovery copies
- Stop ransomware spreading
- All industries
Your next step
Protect the records that matter most.
Start with the records you could not recreate. Keep everything else where it works best.