{"id":2534,"date":"2019-02-11T14:07:43","date_gmt":"2019-02-11T13:07:43","guid":{"rendered":"https:\/\/staging.blogs.yokogawa.de\/chemical-pharma\/uncategorized\/digital-ambition-key-aspect-plant-security\/"},"modified":"2022-06-17T09:28:33","modified_gmt":"2022-06-17T07:28:33","slug":"digital-ambition-key-aspect-plant-security","status":"publish","type":"post","link":"https:\/\/www.yokogawa.com\/eu\/blog\/chemical-pharma\/en\/digital-ambition-key-aspect-plant-security\/","title":{"rendered":"Digital ambition \u2013 key aspect Plant Security"},"content":{"rendered":"

Digital ambition \u2013 key aspect Plant Security <\/strong><\/h2>\n

As the world becomes increasingly connected, smart, sustainable growth hinges on the ability to adapt to customers\u2019 changing needs \u2013 quickly and efficiently. Businesses can achieve this in a shrewd way with appropriate innovations such as digital tools.<\/p>\n

Plant Security Touch <\/strong><\/h2>\n

To ensure that technical innovations are successful, companies must make an acute focus on people and Plant Security as top priority from now on. There are no other alternative to this!<\/p>\n

\u2018Business as usual\u2018 <\/strong><\/h2>\n

Plant Security and safety must be firmly integrated in the corporate culture as part of the daily business.<\/p>\n

Chee Hoe Lee,\u00a0General Manager Strategic Business\u00a0Global IA Cyber Security Evangelist,\u00a0Yokogawa Engineering Asia Pte Ltd, was subsequently available for questions on the topic in an interview:<\/p>\n

Mr. Lee, in today\u2019s smart world, do your business operations still follow certain maxims?<\/em><\/h4>\n

Chee Hoe Lee:<\/strong> Yes, definitely. Place the focus on people. The maxim is this: we have to have a shared fundamental understanding and develop a strategy that sets out where we stand, what our basic attitude is, what corporate culture we observe and how we want it to evolve.<\/p>\n

With regard to cyber resilience, businesses are meanwhile under strong pressure to permanently raise their employees\u2019 awareness of cybercrime. People must be provided with a basic understanding of the methods and procedures used by cybercriminals \u2013 what we call social engineering \u2013 through special Cyber Security awareness trainings<\/a>. That way, they\u2019ll be better equipped to recognize attempted scams and react accordingly.<\/p>\n

Plant Security is a typical key enabler, along with the human factor, for the successful implementation of innovative technologies. Why\u2019s that?<\/em><\/h4>\n

Lee:<\/strong> Plant security is an important factor for the use of innovative technologies because the expanded connectivity and interaction of manufacturing processes mean secure and resilient communication lines are a must \u2013 as shields to avert danger from the company, as it were. As digitally networked production continues to make inroads, the risk of cyber attacks is increasing and with it the need to protect industrial control systems (ICS) from the threat of financial, reputational consequences due to production downtimes, damaged machinery, patent theft or cyber extortion.<\/p>\n

What Plant Security aspects are currently the most burning issues for businesses?<\/em><\/h4>\n

Lee:<\/strong> In order to rule out risks to smooth business processes, the management must weigh up all factors carefully. A business impact analysis (BIA) and risk analyses are normally carried out concurrently and in concert, so as to obtain robust results. Only then can the impacts of disruptions on business operations due to cyber security risks and likelihood be fully assessed.<\/p>\n

A business impact analysis (BIA) and risk analysis should ideally comprise the following ingredients:<\/p>\n

Asset inventory<\/u>
\nAn asset inventory is a significant part of a company\u2019s Plant Security strategy. Detailed information is collected on all hardware and software assets \u2013 such as DCS\/PLC, sensors, actuators, valves, transmitters, firewalls, network routers, switches, computers, servers and printers \u2013 including the current state. This inventory serves as a starting point for informed decisions regarding the further development of essential security portfolio infrastructure projects. You can only protect something effectively if you know what it is you\u2019re protecting.<\/p>\n

Bow-tie diagram
\n<\/u>The bow-tie diagram is a pictorial representation of complex risks, in other words for clarifying risk situations. It provides a valuable structure for applying controls and avoiding security incidents. By visualizing risks clearly in this way, the bow-tie diagram underlines the importance of an OT \/ IT process for businesses. It is easy to understand \u2013 not only for security employees but also for everyone else at the company.<\/p>\n

In short, the use of bow-tie diagrams for security creates enormous potential, which can be leveraged to keep a close watch on controls over IP, assets, market shares, revenue and the firm\u2019s reputation.<\/p>\n

In addition, Bow-tie diagram can also be applied to Safety risk assessment. Since Safety and Security are closely inter-wined, it can help to harmonize the approach.<\/p>\n

Threat modeling
\n<\/u>Threat modeling enables potential threats such as structural weaknesses to be identified, listed and prioritized in relation to hypothetical cyber attacks. It supports the establishment of a comprehensive security architecture with an appropriate security level and helps minimize the attack surface of the system under examination.<\/p>\n

\"\"Figure: Cyber security policies and good practices <\/em><\/p>\n

The current ENISA<\/a> (European Union Agency For Network and Information Security) study makes it very clear, for example, that asset management, risk & threat management, training and awareness are suitable cyber security policies and good practices.\u00a0 <\/em><\/p>\n

Source: European Union Agency For Network and Information Security, Good Practices for Security of Internet of Things in the Context of Smart Manufacturing; November 2018 <\/em><\/p>\n

https:\/\/www.enisa.europa.eu\/publications\/good-practices-for-security-of-iot<\/em><\/a><\/p>\n

 <\/p>\n

\n

Secure Remote Services at the REV2018 – Part 2<\/a><\/p><\/blockquote>\n