Pen Testing SCADA

I have been tasked at work to pen test our ICS system. We have a test server running with all our latest bespoke SCADA applications running on it, and I have network access to this server. I don't really know where to start - nmap, nessus, metasploit, manual tests???

Any help would be massively appreciated