MeruEPC - Integrated Industrial & Enterprise Solutions

Comprehensive Industrial & Enterprise Solutions

MeruEPC provides a full spectrum of engineering, OT, IT cybersecurity, and certification services to meet your critical needs.

Delivering specialized expertise for a secure and efficient future

Our comprehensive offerings in OT Cybersecurity consulting, engineering, and managed services.

OT Cybersecurity Strategy & Governance

OT Cybersecurity Framework Development (ISA/IEC 62443, NIST CSF, ISO 27001, NERC CIP, etc.)
Cybersecurity Maturity Assessments & Gap Analysis
OT Security Policy Development & Governance Framework
Cybersecurity Risk Management & Threat Modeling
Compliance & Regulatory Readiness Audits (PETRONAS TS, IEC 62443, ISO 27001, etc.)
Cybersecurity Awareness & Training Programs (HRDC Claimable)

OT Cybersecurity Risk Assessment & Compliance

High-Level & Detailed OT Cybersecurity Risk Assessments (HRA/DRA)
Threat, Vulnerability & Risk Assessments (TVRA)
Operational Risk & Security Impact Analysis
Cybersecurity Audit & Compliance Check
Cybersecurity Incident Response Planning & Readiness

ICS/SCADA Cybersecurity Engineering & Design

Secure Architecture Design & Hardening (Purdue Model, Zones & Conduits)
ICS/SCADA Secure Network Design & Implementation
Cybersecurity Design Review & Validation
Secure Remote Access & OT Network Segmentation
Zero-Trust Security Model Implementation for OT Environments
Firewall, IDS/IPS & Endpoint Security Design for ICS Systems

ICS/SCADA Cybersecurity Implementation & Testing

OT Security Controls Implementation & Integration
ICS/SCADA System Penetration Testing & Red Team Exercises
Firewall, IDS/IPS & SIEM Implementation for OT Environments
Network Segmentation & Secure Access Solutions
Security Configuration Audits & Hardening for ICS/SCADA
Patch & Vulnerability Management for OT Assets

OT Cybersecurity Managed Services

Continuous Threat Monitoring & OT Security Operations (SOC) Services
ICS/SCADA Threat Intelligence & Anomaly Detection
OT Security Incident Response & Recovery
24/7 Cyber Threat Monitoring & Response
Asset Discovery & Cyber Risk Dashboarding

Cybersecurity Engineering for Critical Infrastructure & Industry 4.0

Cybersecurity Solutions for Oil & Gas, Energy, Power, and Critical Infrastructure
Cyber Resiliency Engineering for Smart Factories & Industry 4.0
IIoT (Industrial IoT) Security & Asset Monitoring
ICS Secure Cloud & Edge Computing Security Design
Secure Digital Transformation & Remote Operations Security

OT Cybersecurity Training & Capability Building

IEC 62443 Cybersecurity Certification Training
ICS/SCADA Cybersecurity Awareness & Hands-on Training
Incident Response & Forensic Investigation Training
Tabletop Exercises for Cyber Threat & Incident Response
OT Security Workshops & Custom Training Programs

Our expertise in comprehensive enterprise cybersecurity solutions.

Offensive Security & Threat Assessment

Penetration Testing: Network, Wi-Fi, desktops, laptops, servers, web, and mobile applications
Compromise Assessment: Identify unknown malware and persistent threats that evade defenses
Secure Code Review: Analyze web, mobile, thin, and thick client applications for vulnerabilities
Social Engineering Assessment: Simulate phishing and social attack vectors to test the human element

Cyber Resilience & Risk Management

Cyber Resilience Framework: Build adaptive, responsive security aligned with business continuity
Technology Risk Management (TRM) Framework: Develop TRM programs aligned with regulatory expectations (e.g. MAS TRM)
Security Posture Assessment: Evaluate internal and external security defenses organization-wide
Network Resilience Testing: Assess infrastructure tolerance to system failures and network attacks
Data Centre Resilience Assessment: Validate critical infrastructure against threats and outages

Security Intelligence & Compliance

Dark Web Breach Assessment: Detect leaked credentials or sensitive data on dark web forums
Security & Compliance Validation: Assess adherence to ISO 27001, NIST, PCI DSS, and other frameworks
CISO-as-a-Service (vCISO): On-demand leadership for security strategy, audits, and governance

Our extensive engineering capabilities across various industrial disciplines.

Core Engineering Disciplines

Hook-up & Commissioning (HUC)
Instrumentation & Control Systems Engineering
Process Engineering
Piping Design & Engineering
Pipeline Integrity & Corrosion Management
Telecommunication Engineering
Rotating Machinery Engineering
Electrical Engineering
Constructability Reviews
Structural Integrity Engineering

Process Safety & Technical Safety

HAZID (Hazard Identification)
HAZOP (Hazard and Operability Studies)
Fire and Explosion Risk Analysis (FERA)
Quantitative Risk Assessments (QRA)
Bow-Tie Risk Analysis
Environmental HAZOP
Escape, Evacuation & Rescue Analysis (EERA)
ALARP Demonstrations (As Low As Reasonably Practicable)

HSSE Advisory Services

HSSE Risk Assessments
Technical Safety Studies
Environmental & Operational Safety Reviews

Asset Management Services

Asset Life Extension (ALE) Studies
Operational Excellence Consulting
Predictive Maintenance & Support
IACS Cybersecurity Operate & Maintenance Integration
Safety Critical Equipment (SCE) Management
Performance Standards (PS) Definition
Manning Level Optimization Studies

Specialized Engineering Studies

Instrumented Protective Functions (IPF / SIL) Studies
Alarm Management Studies
Fire & Gas Mapping
Explosion Protection (Ex) Studies
Computational Fluid Dynamics (CFD)
Finite Element Analysis (FEA)
Human Factors Engineering (HFE)

Our expert guidance and support for achieving various industry certifications and compliance.

ISO Management System Certifications

ISO 9001 – Quality Management System (QMS)
ISO 14001 – Environmental Management System (EMS)
ISO 27001 – Information Security Management System (ISMS)
ISO 20000 – IT Service Management System (ITSM)
ISO 22301 – Business Continuity Management (BCM)
ISO 26000 – Social Responsibility Guidelines
ISO 45001 – Occupational Health & Safety
ISO 22000 – Food Safety Management
ISO 13485 – Quality for Medical Devices
ISO 29001 – Quality for Oil & Gas Industry
ISO 10002 – Customer Satisfaction Management

SOC and Assurance Reports

SOC 1 – Internal Controls Over Financial Reporting
SOC 2 – Trust Service Criteria (Security, Availability, Confidentiality)

Specialized Certification & Regulatory Services

HACCP – Hazard Analysis Critical Control Point (Food Safety)
GDPR – General Data Protection Regulation Compliance
PCI DSS – Payment Card Industry Data Security Standard
CMMI – Capability Maturity Model Integration (Process Improvement)

Driving Resilience & Efficiency: Integrated Solutions for Industrial & Enterprise Excellence