genetec
Hardening Genetec Security Center: The Baseline I Deploy
A practical hardening baseline for a Genetec Security Center deployment. Windows server baselines, Defender exclusions d...
// NETWORK AND SECURITY EXPERT · INDEPENDENT CONSULTANT AND ADVISOR · Ontario, Canada
Networks, physical security, and cybersecurity.
Independent advice on all three.
Hans Study is an independent network and security consultant and advisor based in Ontario, Canada. Boutique work in controls, security systems, and the infrastructure underneath them. Hardening and tuning specialist for Microsoft Windows, Cisco, Aruba, and Genetec. Clients engage Hans when the problem is complicated and they need someone who will tell them what is true, not what is profitable to say.
15+ Years in enterprise infrastructure and security
6 Core sectors served across Canada and the US
100s+ Practitioners taught and mentored
// ENGINEERING
Hands-on technical work, done independently.
The delivery side of the practice. Design, review, troubleshoot, harden, and stabilize the systems and networks an operation runs on. Independent of reseller and integrator incentives. Not a reseller, not an integrator. I work with integrators and end clients to make the system work for them.
Genetec Security Center
Independent Genetec consulting. Architecture review, sizing, federation, deployment oversight, and troubleshooting. Not a reseller, not an integrator. No license revenue.
Learn more →CCTV and Access Control
Vendor-agnostic design and review across Genetec, C-CURE, Milestone, Avigilon, Axis, and Bosch. The system and the network it runs on, treated as one problem.
Learn more →Physical Security Design
Design and gap assessment for access control, CCTV, and integrated physical security. From threat model to a specification an integrator can build to.
Learn more →Enterprise Network Architecture
Most platform problems are network problems wearing a costume. Topology, segmentation, routing, and wireless designed properly from the start, not bolted on later.
Learn more →Industrial and OT Networks
Segmentation, the iDMZ, passive monitoring, and secure remote access applied in a way that respects how plant systems actually run.
Learn more →Data Centre and Cabling
Physical-layer work is cheap to fix at design and expensive after construction. Pre-construction review catches it before it becomes an installed fact.
Learn more →ICAT Design and Project Advisory
Integrated facility systems advisory, owner's representative services, and commissioning oversight for complex physical security and technology projects.
Learn more →Mentorship and Technical Guidance
For integrators on complex bids and practitioners closing a knowledge gap. An independent technical voice on a project already in progress.
Learn more →// ADVISORY
Senior security judgement, when the decision matters.
The leadership and strategy side. Fractional CISO, security and technology strategy, defence supply chain compliance, and the OT, IT, and physical security boundary. Independent, with nothing to sell you but the advice.
Fractional CISO and vCISO
Retained, part-time security leadership for organizations without a full-time CISO. Strategy, board reporting, program ownership, risk, and incident oversight.
Learn more →Strategic Security and Technology
Independent strategy for the decisions that are expensive to reverse. Roadmaps, architecture direction, platform selection, and due diligence. Project-based and vendor-neutral.
Learn more →CMMC and CPCSC Readiness
Scoping, gap assessment, and attestation support for Canadian and cross-border defence suppliers. NIST 800-171 since 2019, not a framework I am reading up on.
Learn more →OT/IT Convergence Security
The physical, OT, and IT boundary, assessed and secured by someone who reads both sides. Where a lot of real exposure quietly hides.
Learn more →Security Assessments and Reviews
Independent program and gap assessments against NIST 800-171, NERC CIP, ISO 27001, and CIS Controls, plus architecture, hardening, and project oversight.
Learn more →// ABOUT HANS STUDY
Technical depth across multiple disciplines.
I started the way a lot of people in this field do. Fixing computers for friends and family, then picking up work installing small business networks and CCTV systems. By 2010 that had grown into my own IT firm. What followed over the next fifteen years is where the depth comes from.
I have spent my career working across public sector, defence, public safety, and critical infrastructure environments, designing and integrating the technology those organizations depend on. That includes years working directly in the federal space on mission-critical networks where failure was not an option.
That depth led to teaching at the post-secondary level. Cisco CCNA, Introductory and Advanced Networking, Information Security, and Microsoft Windows Server and Workstation. Teaching is where you find out how well you actually understand something. Mentoring practitioners and integrators is still part of the work today.
Today I consult independently across Canada and the United States on enterprise networks, OT and ICS security, physical security systems, and ICAT design. The technical writing and the tools on this site come out of that consulting work, not the other way around.
Technical Depth Across Multiple Disciplines
Enterprise networks, cybersecurity, and physical security. Each understood well enough to advise on, and to see how decisions in one affect the others. Most consultants cover one area. Very few cover all three independently.
Over Fifteen Years of Real Experience
Across sectors and project types, including the ones that went sideways before I helped fix them. That experience is how I catch risks early, before they become expensive problems on a live project.
The Read Is Candid
My recommendations do not change based on who is selling. I work with most of these vendors and my read on them is candid. Where they have done something right, and where they have not. What you get is an honest assessment of what fits the environment.
Advice That Follows Through
A recommendation that ends at the design phase is a document, not advice. The goal is a system that performs in the field. That means I stay engaged through delivery and stay available when the integrator hits something unexpected.
// GENETEC SECURITY CENTER
Independent Genetec Security Center work, in depth.
Architecture review, sizing, federation, hardening, and post-deployment troubleshooting on Security Center. Not a Genetec partner. No license revenue. Start with a structured Health Check, or read the field writing first.
// STUDY BYT3S
Recent Technical Writing
OT and ICS
Security Controls for OT Networks That Hold Up in Production
The security controls an operational technology network actually needs, applied in a way that respects how plant systems...
Network Security
The Firewall Did Its Job: What FortiBleed Was Really About
FortiBleed wasn't a firewall flaw. It was a pile of reused, never-rotated credentials with a brand name attached. The le...
// CONTACT
Most engagements start with a conversation about what the organization is trying to accomplish.
If you have a project coming up, a system that is not performing the way it should, or an upcoming procurement that needs independent technical input, reach out directly. No minimum project size. No retainer required.