Where this offering fits
Cyber RADAR is REPLIL’s OT log-management offering. Begin with the events operations and security need to investigate, not an unrestricted collection of every available message. Sources, timestamps and equipment context determine whether a retained event can support a useful conclusion.
Architecture and rollout decisions
Confirm supported sources and authorised collection methods. Test a known event, its source identity and its appearance in the intended review workflow. Record retention, reviewer access and the response to missing collection. An OT log project should avoid unapproved changes to equipment merely to expose another data source.
An evaluation scenario for this offering
Select two supported OT event sources with known names and clocks, then create a small set of approved maintenance and access events. Have an analyst reconstruct the sequence using the proposed log workflow. Add one source with a documented time offset or missing field and check whether the analyst can identify that limitation before making a conclusion. Temporarily pause an authorised test collector to examine the loss-of-evidence notification. The review should demonstrate a trustworthy timeline, clear source ownership and a practical escalation, while making unavailable evidence visible. No process device should be reconfigured merely to satisfy an unapproved logging demonstration.
Evidence to request for this scope
- List priority sources and the decisions their events support.
- Validate time alignment and source-loss reporting.
- Define evidence access and incident escalation.