For either assessment
Describe the facility, the reason for the assessment, the systems or process in scope and the people who know them.
Use this checklist to prepare an initial discussion about HAZOP or OT cybersecurity. It helps organise what you know, what is missing and what needs to be agreed.
Open the checklist01 / Before the first discussion
A complete document pack is not required for an initial enquiry. Record the gaps so they can be included in the scoping conversation.
Describe the facility, the reason for the assessment, the systems or process in scope and the people who know them.
List available process descriptions, current drawings, operating information and earlier study records. Agree the required set with the study team.
List available asset information, high-level network diagrams, access arrangements and existing response procedures. Agree a channel for restricted material.
How we work
Explain why the work is being considered now.
Say what the assessment should help you decide.
Identify what exists and what may need updating.
Confirm scope, participants and how information will be shared.
Questions
No. It is a starting point for scoping. The actual document requirements depend on the facility, the assessment method and the agreed work.
Start with a description and a document list. Agree access and a suitable transfer channel before sharing restricted information.

Start a conversation
Use this checklist to prepare an initial discussion about HAZOP or OT cybersecurity. It helps organise what you know, what is missing and what needs to be agreed.
Enquiries
info@stia.kz