The numbers that define us
years in IT
clients across 12 industries
contract renewal rate
completed projects
critical devices managed
certified technology vendors
The process network and the office network shouldn't be the same network.
In the utilities sector, IT and OT have converged faster than they managed to be properly separated. SCADA systems, telemetry from isolated points, metering, dispatch, etc. have all come to communicate with the administrative network, often without planned segmentation. At the same time, the billing system has become the system that simultaneously supports collections and the client relationship.
Energy, district heating, drinking water and wastewater are among the sectors targeted by GEO 155/2024, the act transposing the NIS2 Directive into Romania. Whether and how it applies to a given organization depends on the size and activity criteria set out in the ordinance, but a check is worth doing before someone else asks for it.
Over 20 years in IT and our own Tier III datacenter. We know what's required of an organization that isn't allowed to stop.
Six situations we encounter at utility providers
The process network and the administrative network communicate without planned separation.
SCADA, telemetry, dispatch and offices, in the same logical space. An incident started from an email can reach systems that supervise physical processes.
Classification under GEO 155/2024 hasn't been verified. Or the remediation measures have been postponed.
The sector is targeted by the ordinance, but no one has put on paper whether and how it applies to the organization, what measures already exist and what's missing — including in the relationship with IT suppliers. Perhaps the proposals you've received so far weren't convincing enough, or their budget is considered too large.
The billing system is a single point of failure for collections and for the client relationship.
When it stops, cash flow stops too, and clients find out before you do.
The isolated points depend on a single communications link.
Stations, measuring points, reservoirs, thermal points — connected over a single route, with no alert when it goes down.
The backup exists, but the restore hasn't been tested.
An untested backup is not a continuity plan. In an inspection or a real incident, the difference shows immediately.
The service runs non-stop. IT support, eight hours.
Dispatch works in shifts; IT, in office hours.
If your organization finds itself in any of the situations above, an assessment puts on paper where the risks are, what the applicable regulations require and what's worth remediating by priority. Schedule a conversation with our engineers.
The ITPS approach in the utilities sector
OT/IT segmentation: the process network, separated from the TESA network.
We design and implement segmented data networks: the process network (OT) separated from the TESA network (IT). Distinct segments, explicitly defined and documented communication rules. Machines and systems with old software keep working, but are no longer accessible from the IT network.
Monitoring and intervention, non-stop.
Through our Managed Services, critical systems — billing, servers, network, the links to the isolated points — are monitored continuously. Response times are set by contract and SLA.
A process for detecting, classifying and escalating incidents.
Together with you, we define the process by which an incident is detected, classified and escalated on time, with clearly documented roles and steps.
Documentation prepared before it's requested.
We work according to ISO 27001:2022 certified processes and build the documentation together with you: access policies, a record of technical measures, the suppliers' register, data processing agreements. When a request comes, the answer already exists in writing.
Backup and restore tests, with defined RTO and RPO.
We don't consider a backup functional until its restore has been tested and recorded. RTO and RPO are set explicitly, not assumed.
Redundant links to the isolated points.
We design the data communications so that a failure on the main route doesn't leave a measuring point or a station without a link to dispatch.
A whole team, not a single person.
The infrastructure is documented: configurations, procedures, intervention history. Continuity doesn't depend on one person's memory. And if you already have an internal IT team, we work alongside it, complementing its skills.
The relevant services for utility providers
Of the six services we offer, four are of particular importance for a utility provider:
IT Audit & Consulting →
A complete analysis of the IT environment against regulatory requirements: where the network is exposed, how the process zone is separated, which remediation takes priority. The natural starting point.
Managed Services →
Monitoring of critical systems and non-stop intervention, with response times set by SLA.
Backup & Disaster Recovery →
Backups for the billing, record-keeping and operation systems, with documented restore tests and defined RTO / RPO.
Hosting & Colocation →
A second point for critical systems, in our Tier III datacenter in Timișoara — demonstrable replication and continuity, with data on Romanian territory.
Not sure yet whether and how GEO 155/2024 applies to you? See also NIS 2 Consulting →
Compliance and certifications
Energy, district heating, drinking water and wastewater are among the sectors targeted by GEO 155/2024, and supply-chain security — including that of IT suppliers — is one of the required measures. ITPS operates its own Tier III datacenter, with ISO 27001:2022 (information security) and ISO 9001 (quality management) certifications, keeping data on Romanian territory. We don't promise to „make you compliant" — compliance remains your organization's responsibility. What we do concretely: implement the technical measures, build the documentation that proves them and sign the agreements that clearly define each party's responsibilities in the supplier relationship.
Avem peste 80 de certificări pentru platformele pe care rulează afacerea dumneavoastră. Colaborăm cu 20 de furnizori de tehnologie best-of-breed.
Request a resilience assessment of your IT infrastructure.
An ITPS engineer analyzes the current state of your infrastructure together with you: where the risks are, how the process network is separated, what the applicable regulations require, what's worth remediating by priority.
We reply within the next business day.