OT security · IT/OT segmentation · Industry 4.0
The IT/OT boundary in your factoryprobably doesn’t exist.
Most factory networks are flat: IT and OT reach each other directly, so one compromise on the IT side becomes a stoppage on the floor. I run OT security audits, design IT/OT segmentation, and get plants ready for Industry 4.0 — without stopping the line.
Book a free assessment
30 minutes. Zero jargon.
HOW I WORK
Audit
Find every asset, protocol, and open path in your OT network.
Secure
Segment, harden, and patch. Applied on the running plant.
Sustain
Baselines, monitoring, and reviews so it stays that way.
I don’t secure factories from a slide deck. I ran IT/OT for every Centrale Danone plant in Morocco. Production stoppage is expensive, so everything I do runs on the live plant.
A security practice built for factories that never stop
Most OT security projects start with a slide and end with a proposal. Mine start with your firewall rules and your PLCs, and end with a segmented network you can actually run.
Clear scope, fixed timeline, and the line keeps running. You always know what changes on the factory floor, and when.
WHAT I DO
I find exactly what's exposed in your OT network. Asset inventory, firewall review, gap analysis against IEC 62443. You get a prioritized action list, not a report nobody reads.
#OTSECURITY #IEC62443
I carve flat networks into zones. Purdue-model architecture, DMZ, unidirectional gateways where the risk demands it. Built on the running plant, without stopping the line.
#SEGMENTATION #PURDUEMODEL
IIoT, predictive maintenance, AI where it actually pays off. Installed and secured from day one, so your smart factory never becomes your attack surface.
#INDUSTRY40 #IIOT
ISMS design on ISO/IEC 27001, risk management on ISO/IEC 27005, backup and recovery policies on ISO/IEC 27031 and NIST 800-34, and NIS2 readiness for plants that feed the EU market. Policies you can hand to an auditor.
#GOVERNANCE #NIS2 #ISO27001
BOTH SIDES OF THE BOUNDARY
Segmentation is only as good as the IT estate on the other side of it. I’ve built and run that side too — nearly six years consulting on enterprise IT infrastructure, alongside the plant IT estate at Centrale Danone.
- Network & security
- CISCO ROUTING & SWITCHING · FORTINET · FIREWALLS · VPN · WIRELESS NETWORKING · NETWORK DESIGN
- Cloud
- MULTI-CLOUD NETWORKING (AVIATRIX) · ALIBABA CLOUD · CLOUD OPERATIONS
- Systems & automation
- RED HAT ENTERPRISE LINUX · CENTOS · WINDOWS SYSTEM ADMINISTRATION · ANSIBLE · IT AUTOMATION
- Infrastructure & delivery
- ENTERPRISE IT INFRASTRUCTURE DESIGN · NETWORK ADMINISTRATION · PROJECT MANAGEMENT · TEAM LEADERSHIP
- AI
- GENERATIVE AI PLATFORM OWNERSHIP · AI FOR INDUSTRIAL OPERATIONS
Why factories work with me
I secure factories the way I ran them: on the floor, with the line running.
WHAT SETS ME APART
Practitioner, not a vendor
I ran the plants I now secure. There is no product I need you to buy.
Standards, not slideware
IEC 62443, ISO/IEC 27001 and NIS2 applied to your equipment, not quoted at you.
Zero-downtime delivery
Changes land in agreed windows, on the live line. You know what moves, and when.
One accountable point
You work with me from the first audit to handover. No rotating bench of juniors.
Morocco field-tested
Proven across multiple Moroccan food and beverage plants, in production.
Ilyass MotyaSecurity delivered on a running plant.
Zero downtime.
The proof is in plants that kept producing while the work happened. No decks, no theater, no downtime.
what you get
The direct route from
exposed to defensible
No generic frameworks. No red-team theater for the brochure. One clear, prioritized plan you can execute while the line keeps running.
START WITH A FREE ASSESSMENT
measured against
IEC 62443
The standard every audit and every network design is measured against.
- /01
Exposure map
Every asset, network path, and open route in your OT estate, documented.
- /02
Risk-ranked plan
Ordered by what it would cost your production, not by severity score alone.
- /03
Delivery in your windows
Work executed on your schedule, while the plant keeps running.
- /04
Evidence pack
Documentation your team can operate from and your auditors can use.
Meet the person behind the work.
I’ve run factory IT/OT. Now I secure it end to end.
Founder of INOPSIO. Ten years across OT security, industrial infrastructure, and network engineering — most recently running IT/OT for all of Centrale Danone’s Moroccan factories, driving Industry 4.0 while keeping production running and secured. No team behind a curtain, just one accountable specialist.
OT/IT Security · Critical Infrastructure · Industry 4.0
IT/OT Manager, all Moroccan factories — Centrale Danone, 2022–2025
Nearly six years IT consultant — Cisco, Fortinet, infrastructure design & project management
IT trainer & exam jury member, 2014–2019
Master’s, Network & Security Systems — Groupe ISGA
Cisco CCNA · Microsoft MCSA · Linux LPI · ICSI CNSS
English · Arabic · French
INOPSIO — Rabat, Morocco. Working across MENA and worldwide.
No go-betweens.
Just me, on the other side.
LET’S TALK ABOUT YOUR PLANT
The questions I get asked first
Downtime, scope, price, and what happens if something breaks. If your question isn't here, send it — you'll get a straight answer, not a brochure.
Common questions
No. The work is planned around your production schedule, not against it. Changes go in during windows you approve, every one of them has a tested rollback path, and nothing touches a running line without your sign-off. That's what zero-downtime delivery means here: no unplanned stoppage on any plant I've worked on.
A review of your network architecture, firewall rules, remote access, and everything exposed at the IT/OT boundary. I map how your PLCs, SCADA, and MES sit on the network, then test that against IEC 62443 zones and conduits. What comes back is an exposure map, a risk-ranked plan, and an evidence pack you can hand to an auditor — not a hundred-page PDF nobody opens.
No. Most factories don't have one, and your IT team already has a day job. I work alongside the people you already have — no new headcount, and no retainer for a team you don't need. The plan is written so your own team can carry it afterwards, not so you stay dependent on me.
No. Your integrator knows your machines; I secure the network they run on. I work with the vendors and integrators you already use, and I don't resell their hardware or take a margin on it — which is exactly why I can tell you when you don't need to buy something.
An audit runs from a few days to a couple of weeks, depending on the size of the site and how much documentation already exists. Implementation is scheduled around your production priorities. You get a fixed timeline up front, and you always know what changes on the floor and when.
Every change is tested and reversible before it goes near a live line. If something behaves unexpectedly it's rolled back on the spot and the line keeps running. There's no ticket queue and no account manager in between — you call me, and I'm the person who fixes it.
It depends on your market. If you export to the EU, or sit in a supply chain that does, NIS2 is already reaching you through your customers' security questionnaires. IEC 62443 is the standard I design against either way, because it's the one OT auditors work from. One call is usually enough to tell you which of them actually applies to your plant.
Fixed price per project, once the scope is clear. The first call and the assessment are free; after that you get a written scope with a fixed price, so nothing on the invoice is a surprise. Hourly work is available for smaller pieces.
For plant work, yes — a remote call doesn't replace walking the floor. I'm based in Rabat and work across Morocco and the MENA region, with remote support worldwide.
Still curious
timeline
From the classroom to the plant floor
Every step since 2014 has moved closer to the machines: first teaching the networks, then building them, now securing them.
Started in IT training
Teaching networks and systems at EMIN (Fès-Meknès), then INFOSANTE (Khenifra) as trainer and exam jury member.
Turned to consulting
Joined Capital Technology — Cisco, Fortinet, and enterprise infrastructure projects across Morocco. Nearly six years, and it kept running straight through the Danone period.
Ran IT/OT, Centrale Danone
IT/OT for every Moroccan factory — Industry 4.0, cybersecurity, digital manufacturing, and ownership of the generative AI platform. No unplanned production stoppage.
Founded INOPSIO
Now working directly with plants, nobody in between: OT audits, IT/OT segmentation, and governance for factories that never stop.