The Select Group Launches TSG/ControlBurn to Find and Close Critical OT Attack Paths

The Select Group has launched TSG/ControlBurn, an OT security service powered by Frenos that enables organizations to pinpoint adversary-accessible paths within operational environments and prioritize targeted remediation. This service integrates Frenos’s attack-path simulation with TSG’s cyber-focused consulting, engineering, and change-management expertise.

TSG/ControlBurn replaces point-in-time assumptions with attack-path evidence based on actual configurations. Organizations can evaluate segmentation, identify reachable vulnerabilities, and understand potential exposure without scanning or testing production systems. TSG translates those findings into a practical remediation roadmap that aligns with operational requirements and change-control processes.

What Is TSG/ControlBurn?

TSG/ControlBurn follows a five-step process that moves from OT data to validated remediation. Frenos powers the first three stages by ingesting existing configuration and asset data, building a digital twin, and simulating adversary paths to critical systems.

The Select Group leads the final two stages. Its team evaluates which mitigations fit the organization’s operational requirements, develops a prioritized roadmap, and reruns the simulation after changes are made. This gives OT teams clear evidence of where an adversary can reach, what to fix first, and whether the remediation worked.

Why Annual OT Penetration Testing Falls Behind

While industrial organizations continuously monitor physical conditions, OT network security assessments are typically annual. Manual penetration testing often requires significant coordination due to safety protocols, outage windows, and specialist availability.

Once testing is complete, the results begin to age. A firewall change, new asset, vendor connection, or emerging vulnerability can create an attack path that did not exist during the assessment. TSG describes this declining relevance as the assessment half-life, where the value of the previous test may expire before the next one begins.

Annual testing may still support compliance requirements, but it provides only a point-in-time view. When that report is treated as evidence of the current environment, it can create confidence in controls and boundaries that have since changed.

How Frenos Powers TSG/ControlBurn

Frenos builds the digital twin from data organizations already collect, including firewall and router configurations, routing tables, asset inventories, and vulnerability exports. Its AI reasoning agent then tests possible adversary routes inside the model and ranks the paths that reach assets the organization identifies as critical.

Frenos demonstrated this capability at the S4x26 POC Pavilion, where the platform completed 154,000 OT attack-path simulations in 17 minutes and 7 seconds and validated 18 exploitable paths into critical Rockwell and Siemens zones.

No agents, active scanning, or production access are required; all simulations run within the digital twin. Organizations can also opt for a [1-Day Simulated OT Pen Test](https://frenos.io/service/1-day-simulated-ot-pen-test) to identify exploitable paths without operational risk.

How The Select Group Turns OT Security Findings Into Action

Frenos reveals exploitable paths to critical assets, and The Select Group uses that intelligence to guide remediation within the organization’s change-control process. TSG validates the data behind the model, works with engineers to understand operational priorities, and evaluates mitigation options against the realities of the environment.

From there, TSG develops a dependency-sequenced remediation roadmap and prepares changes for review through the organization’s existing change-control process. After approved changes are implemented, the environment can be simulated again using the same assumptions and critical assets to confirm that vulnerable paths were closed and exposure was reduced.

Three TSG/ControlBurn Service Tiers

TSG/ControlBurn is available in three tiers, each beginning with a four-day engagement:

• Foundation: Assesses one site and its primary OT networks, delivering ranked attack paths, recommended mitigations, and a remediation roadmap.
• Consulting: Adds TSG support for prioritizing the backlog, preparing changes for approval, and rerunning simulations to verify that each path has been closed.
• Implementation: Adds TSG engineers who work alongside the organization’s team to make approved changes within its established change-control process.

Validate OT Security When the Environment Changes

TSG/ControlBurn allows organizations to reassess exposure when the OT environment changes instead of waiting for the next annual testing cycle. This can include adding a vendor remote-access connection, modifying firewall rules, migrating a cloud historian, integrating an acquired site, or introducing new equipment.

Because each simulation can use the same critical assets and testing assumptions, teams can compare results over time and determine whether a planned change introduces new exposure. They can also rerun the model after remediation to verify that the intended attack path was closed before relying on the updated control.

About The Select Group

The Select Group is a North American technology consulting and services firm focused on enabling organizations to turn modernization strategies into measurable business outcomes. Its capabilities span cybersecurity, cloud and infrastructure, data and AI, learning and change, and project management and agile delivery.

The company works across environments where technology decisions affect critical business and operational systems, including production facilities, data center infrastructure, building management systems, and clinical device networks. Its model combines specialized expertise with hands-on delivery, equipping clients to strengthen capabilities and adapt as their technology requirements evolve.

See Your OT Attack Paths in Just Four Days

TSG/ControlBurn gives organizations a clear view of which attack paths can reach critical operational assets and what actions can reduce that exposure. The four-day engagement combines Frenos-powered adversary simulation with The Select Group’s operational analysis and remediation planning.

[Explore TSG/ControlBurn](https://www.selectgroup.com/tsg/controlburn) to identify vulnerable paths, prioritize the right mitigations, and build a practical plan for closing them.