/

/

/

Les sites critiques sans personnel, protégés dans le physique comme dans le numérique.

Postes électriques, stations de pompage, nœuds de télécommunications et sites d’observation fonctionnent sans personnel. C’est par leurs clôtures, leurs portes et leurs réseaux de contrôle que commencent les attaques physiques et informatiques. Détection périmétrique, alarmes anti-intrusion et surveillance passive du réseau de contrôle alimentent un seul registre, pour que les exploitants réagissent avant toute perte de service.

Industrie

Résilience civile

Mesures

5

Sources citées

5

1. Résilience civile · Sécurité des sites critiques

   Where attacks begin

   Unstaffed substations, pumping stations and telecom hubs keep a country running, and their fences, doors and control networks are where physical and cyber attacks begin. Operators of essential services must manage both risks and report incidents. Knowing the moment a fence is crossed or a strange device appears changes the outcome.

2. Ce qui est mesuré

   Perimeter, doors and the network

   Radar and thermal cameras watch fence lines and approaches day and night, fixed cameras cover each detection zone, contacts watch doors, gates and cabinets, and a passive tap listens to the site control network for new devices and unusual traffic without ever sending into it.

   Instruments

   Radar · Thermal cameras · Fixed cameras · Door contacts · Passive network tap

3. Le nœud de base

   Verified before it is raised

   The site node fuses radar, thermal and video so animals and weather do not raise alarms, and attaches a clip to every alarm it does raise. It learns the normal devices and traffic of the control network and flags anything new, signing every event for the incident record.

4. Radio et liaisons

   Two paths, one guarded

   Alarms and clips ride the operator’s fibre to the control room through a security gateway that keeps the monitoring separate from the control network. A cellular path on another network keeps alarms flowing when the fibre is cut, often an intruder’s first move.

   Liaisons

   Fibre · Réseau mobile public

5. Comment ça marche

   From a cut fence to a response

   At night radar picks up a person approaching a substation fence. The thermal camera confirms it, the node raises a verified alarm with a clip, and security operations sends responders and alerts the police. Control engineers check the network view: no new device has appeared.

6. De la commande à l’exploitation · Commande

   Scope the sites and the threats

   The scope reads the operator’s site list, its risk assessment under the critical entity rules, past incidents, the control system architecture and its response arrangements. Nexus Observatory Inc. returns a kit by site type, the alarm and verification design, the network monitoring design and a price per site and per year.

   Planifier un déploiement

7. De la commande à l’exploitation · Relevé

   Survey perimeters and networks

   Crews walk each site type with the operator’s security and control engineers: fence lines and approaches, detection zones and camera positions, entry points, the control network layout, tap points and the two backhaul paths. Findings are recorded with photographs and drawings.

8. De la commande à l’exploitation · Autorisations

   Access, privacy and change control

   Work in substations follows the operator’s switching and access rules, cameras are aimed and masked to follow privacy rules for public land, and connecting a tap to the control network goes through the operator’s change control. Every approval is kept with the site record.

9. De la commande à l’exploitation · Fabrication

   Construire et durcir

   Kits are built per site type; nodes are hardened, enrolled with their identities and configured with the zones and alarm rules. The whole kit is tested together, including a simulated intrusion and an unknown device on a test control network, before it ships.

   Ouvrir le configurateur de stations

10. De la commande à l’exploitation · Installation

    Install without an outage

    Crews install radar and cameras on poles, contacts on doors and cabinets and the passive tap on the control network without interrupting it. Power and backhaul are connected, and every point is photographed and recorded. Crews follow the site safety plan throughout the work.

11. De la commande à l’exploitation · Mise en service

    Commission with a walk test

    Chaque nœud prouve son identité. A walk test crosses every detection zone at different speeds, doors and cabinets are opened, alarms are verified in the control room and the network baseline is learned over weeks before anomaly alerts are enabled.

12. De la commande à l’exploitation · Exploitation

    Respond with evidence

    The security operations view shows every site, its alarms, verified clips and network anomalies. Responders are sent only to verified events, control engineers see unknown devices at once, and every incident is recorded for reporting to the authorities. Every alert and action is kept on the record.

13. De la commande à l’exploitation · Maintenance

    Test, patch and review

    Detection zones are walk-tested on the agreed plan, cameras are cleaned and re-aimed, node software is patched in rings, and network baselines are reviewed after every planned change. Incident reviews feed back into zones and rules, and every change is kept with the site record.

    Réserver des services sur le terrain

14. Produits de données

    For security, control and compliance

    Security operations and responders receive verified alarms with clips; control system engineers receive new device and traffic alerts; resilience and compliance teams receive incident records; executives and regulators receive site risk and response reports, each tied to the site and time.

    Voir les produits de données

15. Preuves

    Records the rules ask for

    Measures support the critical entity resilience directive and the cybersecurity directive. Intrusion detection follows the alarm system standard, video follows the surveillance standard, and control network monitoring follows the industrial automation security series. Every alarm, clip and response is signed and kept.

    Référentiels

    Directive (EU) 2022/2557 · Directive (EU) 2022/2555 · EN 50131 · IEC 62676 · IEC 62443

16. Ce que vous obtenez

    Assurance des technologies opérationnelles pour les sites d’observation

    Identité, attestation, segmentation et surveillance des instruments et des nœuds de périphérie, avec preuves pour les audits. Présentés comme des services, jamais comme une garantie de sécurité. Fourni sous forme de service géré et services professionnels, pour operators of critical sites, agencies. Scale: Fleets of sites. Service levels are written as numbers you can measure on your own dashboard.

    Parler aux ventes

17. Étape suivante

    Planifier avec nous : sécurité des sites critiques

    Tell us the site, the measurements and the rules it answers to. We reply with a survey proposal, a design and a scope for critical site security. An engineer replies with a survey proposal and a scope, and the plan grows from one site to the network you need, at your pace.

    Planifier un déploiementOuvrir le configurateur de stationsOuvrir le Studio

01Le lieu et ses dangers

Où il fonctionne, et ce qui peut mal tourner.

Operating contextOperators of essential services must manage physical and cyber risks to the sites that deliver them. Critical entities are required to take resilience measures and report incidents, network and information systems must meet cybersecurity duties, industrial control systems are secured to the international series for automation security, and alarm and video systems follow their own standards.

Dangers

• Fence cutting and break-ins at unstaffed sites
• Theft of copper, batteries and fuel
• Unauthorised devices on the control network
• Remote access that bypasses the operator’s controls
• Alarms that flood a control room with false triggers

02Ce qu’il faut mesurer

Quoi, où, à quelle fréquence, et selon quelles règles.

Chaque mesure indique où elle est prise, à quelle fréquence, et la norme ou la réglementation publique qui la fonde. Les numéros de la colonne des sources ouvrent la source citée plus bas.

03La pile d’observation

D’un module de base à un réseau.

Les mêmes briques à chaque échelle : des instruments et un nœud de base, un site avec sa radio, une flotte exploitée comme un tout, et un réseau fédéré sur le protocole ouvert.

1. 01

   Unité de base

   A site point: radar, thermal and fixed cameras, door and cabinet contacts and a passive network tap on an edge node.

   Build a station →
2. 02

   Site

   A site: the node behind a security gateway, two backhaul paths and its own protected power.

   Plan a site →
3. 03

   Parc

   Every unstaffed site of an operator watched from one security operations view, with one incident record.

   Managed offers →
4. 04

   Réseau

   Operators share incident records with authorities and sector bodies under the critical entity and cybersecurity rules.

   The open protocol →

• 01Caméra thermique
• 02Caméra fixe
• 03Radar de surveillance (FMCW)
• 04Nœud de périphérie (Wedge)
• 05Passerelle zéro confiance
• 06Terminal fibre
• 07Modem/routeur cellulaire
• 08Poteau

Radio et liaisons

Fibre

Most substations and pumping stations have operator fibre; alarms and clips ride it to the control room.

Radio et liaisons

Réseau mobile public

A cellular path on another network keeps alarms flowing when the fibre is cut, often the first thing an intruder does.

Edge computeThe node fuses radar, thermal and video so animals and weather do not raise alarms, verifies every alarm with a clip, learns the normal devices and traffic on the control network and flags anything new, and signs every event.

PowerThe security node runs from the site’s protected DC supply with its own battery, so it keeps reporting when an intruder cuts the mains.

04Comment ça marche

De l’instrument au produit.

Le parcours d’une observation, niveau par niveau, avec l’interface de chaque liaison et une nomenclature en dessous ; puis comment ce nœud devient un site, une flotte et des réseaux fédérés.

05De la commande à l’exploitation

Chaque étape, du premier appel à un site en service.

La même équipe et le même dossier portent le travail, du cadrage à la maintenance.

1. 01 Order

   Scope the sites and the threats

   The scope reads the operator’s site list, its risk assessment under the critical entity rules, past incidents, the control system architecture and its response arrangements. Nexus Observatory Inc. returns a kit by site type, the alarm and verification design, the network monitoring design and a price per site and per year. 2

2. 02 Survey

   Survey perimeters and networks

   Crews walk each site type with the operator’s security and control engineers: fence lines and approaches, detection zones and camera positions, entry points, the control network layout, tap points and the two backhaul paths. Findings are recorded with photographs and drawings. 4

3. 03 Permits

   Access, privacy and change control

   Work in substations follows the operator’s switching and access rules, cameras are aimed and masked to follow privacy rules for public land, and connecting a tap to the control network goes through the operator’s change control. Every approval is kept with the site record.

4. 04 Build

   Construire et durcir

   Kits are built per site type; nodes are hardened, enrolled with their identities and configured with the zones and alarm rules. The whole kit is tested together, including a simulated intrusion and an unknown device on a test control network, before it ships. 4

5. 05 Install

   Install without an outage

   Crews install radar and cameras on poles, contacts on doors and cabinets and the passive tap on the control network without interrupting it. Power and backhaul are connected, and every point is photographed and recorded. Crews follow the site safety plan throughout the work.

6. 06 Commission

   Commission with a walk test

   Chaque nœud prouve son identité. A walk test crosses every detection zone at different speeds, doors and cabinets are opened, alarms are verified in the control room and the network baseline is learned over weeks before anomaly alerts are enabled. 1

7. 07 Operate

   Respond with evidence

   The security operations view shows every site, its alarms, verified clips and network anomalies. Responders are sent only to verified events, control engineers see unknown devices at once, and every incident is recorded for reporting to the authorities. Every alert and action is kept on the record. 5

8. 08 Maintain

   Test, patch and review

   Detection zones are walk-tested on the agreed plan, cameras are cleaned and re-aimed, node software is patched in rings, and network baselines are reviewed after every planned change. Incident reviews feed back into zones and rules, and every change is kept with the site record.

06Produits de données et intégration

Ce qu’il fournit, à qui, et dans quels systèmes.

Produits de données

• Verified intrusion alarms with clipsSecurity operations and responders
• New device and traffic alertsControl system engineers
• Registres d’interventionResilience and compliance teams
• Site risk and response reportsExecutives and regulators

Intégration

• Opérations de sécuritéVerified alarms reach the operator’s alarm receiving platform through its own interfaces.
• Control systemNetwork anomalies are sent to the operator’s security monitoring, never into the control system itself.
• Incident reportingRecords are exported for notification to the competent authorities.

Exchanged through ONVIF, MQTT, Syslog.

07Questions des acheteurs

Avant de cadrer votre projet.

Does the tap touch our control system?

It is passive: it listens and never sends into the control network.

Will animals set off alarms?

Radar, thermal and video are fused so most animals and weather are filtered.

Does it help with reporting duties?

Yes. Incident records hold what authorities ask for.

Can it run if the fibre is cut?

Yes. Alarms switch to a cellular path on another network.

08Ressources

Les sources de cette page.

Normes, réglementations et lignes directrices publiques, citées là où elles s’appliquent. Chacune ne s’applique que dans sa juridiction ou son champ.

1. 1EN 50131: Alarm systems, intrusion and hold-up systemsEuropean Committee for Electrotechnical Standardization
2. 2Directive (EU) 2022/2557 on the resilience of critical entitiesEuropean Union · 2022
3. 3IEC 62676: Video surveillance systems for use in security applicationsInternational Electrotechnical Commission
4. 4IEC 62443: Security for industrial automation and control systemsInternational Electrotechnical Commission
5. 5Directive (EU) 2022/2555 on measures for a high common level of cybersecurity across the UnionEuropean Union · 2022

09Voir aussi

Cas d’usage et solutions.

10Résilience civile : domaines spécialisés

Les autres domaines de cette industrie.

Présentez-nous le site.

Planifiez un déploiement, configurez une station, modélisez-la dans le Studio ou parlez à l’équipe commerciale. Le formulaire indique qui reçoit vos coordonnées.