Fibre-optic patch cables connected to a network switch

Home / Design services

From risk to architecture.

The NetXpose Design Bureau takes you from “what could go wrong?” to drawings your engineers can build and your auditors can sign, then implements and maintains what we design.

1Risk AssessmentKnow the risk 2Security PlanAgree the roadmap 3Security DesignDraw the defences 4Network DesignConnect it right 5System DesignMake it one system

Assess and plan before anything is drawn.

Every design starts from a clear view of the risk and a plan everyone can sign off.

Operations room with monitoring screens and consoles
Step 1 · Assess

Risk Assessment

Know exactly what you’re protecting, and from what. We identify critical assets, map threats and vulnerabilities, and rate every risk by likelihood and impact, so budget goes where it removes the most risk.

  • Asset, threat & vulnerability identification
  • Gap analysis against your framework
  • Likelihood × impact risk register
  • Prioritised risk-treatment plan
Technical blueprint drawing on blue paper
Step 2 · Plan

Security Plan

A roadmap your board, auditors and engineers can all sign. We turn the risk picture into a phased plan of policies, controls, owners and timelines, aligned to the framework you’re measured against.

  • Security governance, policies & standards
  • Control roadmap with named owners & clear accountability
  • Compliance mapping (IM8, ISO/IEC 27001, IEC 62443)
  • Incident response & continuity plans

Then we design all of it, together.

Security, network and system design from one team, so nothing falls between the drawings.

Engineer's hand fitting equipment into a server rack
Step 3

Security Design

Defence in depth, designed in from day one. We draw the trust zones and specify every control, so security is a property of the architecture, not a product bolted on later.

  • Threat modelling & attack-path analysis
  • Zero-trust & segmentation architecture
  • Logging, SIEM & SOC design
  • Control matrices mapped to your framework
Close-up of a patch panel with blue and white network cables
Step 4

Network Design

No single point of failure and no surprises at handover. Campus, data centre, WAN and OT networks, sized for today with headroom for the next decade.

  • High- & low-level design (HLD / LLD)
  • Data centre, WAN & SD-WAN
  • OT / ICS networks & IT/OT boundaries
  • IP plans, topology drawings & BoQ
Long aisle of server cabinets in a bright data hall
Step 5

System Design

The whole picture on one page, and the detail behind it. End-to-end architecture that ties infrastructure, cloud, applications and field equipment into one system that works.

  • End-to-end solution architecture
  • Integration & interface specifications
  • High availability & disaster recovery
  • Test, acceptance & handover plans

What you receive

Audit-ready, build-ready.

Every engagement ends with documents reviewers can audit and builders can follow, in our format or in yours.

Aligned to IM8 CSA Cyber Trust IEC 62443 ISO/IEC 27001 NIST CSF
01Risk register & treatment plan
02Security plan, governance & control roadmap
03High-level design (HLD)
04Low-level design (LLD)
05Control & compliance matrix
06Topology drawings & IP plan
07Bill of quantities
08Test, acceptance & handover plan

We don’t stop at the drawing. We implement and maintain it too.

See implementation →