Capula and OPSWAT’s strategic partnership strengthens critical infrastructure cyber resilience

The strategic partnership aims to assist UK operators in energy, water, and other essential services in meeting rising compliance obligations under the Network and Information Systems (NIS) Directive and the National Cyber Security Centre’s (NCSC) Cyber Assessment Framework (CAF).

The deployment approach focuses on two key cybersecurity vulnerabilities for critical infrastructure: data in transit and data in storage. Regulators such as OFGEM and OFWAT utilise these control areas within the CAF framework to evaluate cybersecurity maturity across essential services, including energy, water, and transportation.

As organisations race to comply with tightening regulations, particularly with further updates to the NIS Directive expected by 2027, Capula’s campaign offers a clear, actionable path toward regulatory compliance, operational resilience, and reputational protection.

The partnership utilises OPSWAT’s advanced scanning kiosk technology, which Capula integrates and deploys across client sites. These kiosks are purpose-built to inspect a wide range of removable media, such as USB drives, micro-SD cards, and CDS, before they are connected to operational systems, ensuring that only clean, authorised data enters critical environments.

This capability is particularly crucial for legacy operational technology (OT) environments, which often lack modern connectivity and therefore rely on removable media to transfer data between isolated systems. As many of these systems cannot be upgraded due to cost or operational constraints, secure media handling becomes a necessary safeguard.

“You can’t always upgrade legacy equipment,” said Christopher Nelson, Head of Sales Cybersecurity at Capula. “That’s why we need secure, practical ways to manage data exchange—and OPSWAT’s technology provides exactly that.”

Capula has recently implemented the OPSWAT solution across more than ten critical infrastructure sites, including large-scale multi-site deployments with EDF. Projects range from straightforward installations to complete turnkey services including configuration, testing, and customisation, often under demanding timelines.

These deployments enable clients to meet specific CAF indicators of good practice, helping them move from red or amber audit status to full compliance.

“Our approach doesn’t stop at installation,” added Nelson. “We bridge the compliance gap with deep operational expertise and post-implementation support tailored to each site.”

While the immediate goal is regulatory alignment, the broader impact includes reduced financial penalties, less downtime, and a lower risk of cyber breaches. NIS violations can lead to fines of up to 10% of annual turnover, and the reputational cost of a cyber incident can be even more severe.

Capula’s campaign also addresses the growing skills gap in cybersecurity implementation. “Technology alone isn’t enough,” said Nelson. “You need qualified people to deploy, monitor, and maintain it effectively—and that’s where Capula’s 50-year heritage delivers real value.”

Benjamin White, Director of Industrial Control Partnerships, OPSWAT, commented: “We’re proud to recognise Capula as an OPSWAT Platinum Partner—our highest level of partnership. This distinction highlights their exceptional technical expertise, innovative solutions, and steadfast commitment to protecting critical national infrastructure across the UK and Ireland. With over 50 years of industry experience, Capula brings deep knowledge of these vital sectors and a clear understanding of the cybersecurity requirements needed to safeguard them.”

The initiative is part of Capula’s ‘Strengthen Defences’ pillar of its Smart Digital Operations (SDO) framework, demonstrating a wider commitment to helping industrial clients navigate the evolving cybersecurity landscape.

With regulatory scrutiny only set to intensify, Capula and OPSWAT are positioned to deliver scalable, effective cyber resilience where needed most.