資安方案
以生命週期為視角,Yokogawa 的資安方案提供韌性十足的工業控制系統網路安全服務與解決方案,以降低客戶 ICS 環境中的資安風險。該方案結合數十年的工業自動化專業、資安架構設計最佳實務,以及工廠營運經驗,確保安全可靠的運作,這也是客戶與 Yokogawa 的首要考量。

-
資安意識與教育訓練
即使具備最完善的資安防護,因為缺乏資安知識與意識,人為失誤仍導致許多資安事件。
Details
客戶挑戰
根據 FM Global 對 200 位財富 500 大企業領導者的調查,84% 的受訪者認為工業控制系統的網路攻擊對業務而言是「重大關注」問題。請參考 FM Global 調查。
過去十多年來,資安已成為工業設施、製程工廠及其他關鍵資產(如感測器、馬達及其他控制設備)風險管理的重要因素。客戶普遍理解 IIoT(工業物聯網)、雲端與工業 4.0 可帶來的營運轉型、創新產品、更智慧的服務及更高工作效率,但同時也帶來資安風險,挑戰客戶如何安全地開啟數位化新世界。
Yokogawa 解決方案
Yokogawa 全程支援客戶實現資安生命週期管理,這是可持續成長策略的核心。
在現今工業控制系統環境中,IT 與 OT 已高度融合,因此所有支援或依賴系統的人員必須有共通理解。Yokogawa 因此提供涵蓋企業整體組織的完整工業資安方案,從企業層級到工廠現場均適用。
資安方案服務項目
Yokogawa 的完整資安方案提供多元服務,支援客戶有效管理網路風險。方案包含六個階段,持續執行 PDCA 循環:

客戶效益
Yokogawa 的資安生命週期管理提供全面資安解決方案,保障控制系統的可持續性與運行效率:
- 資安方案將調整並提升工廠三大要素——人員、流程與技術——的能力,降低網路安全風險,克服三者之間的落差。
- 完整的資安路線圖支援企業中長期規劃,指導如何持續執行資安方案並落實防護措施,確保所有利害關係人理解資安旅程。
- 方案促進跨部門協作,使員工更積極投入日常資安管理。
- 方案依據國際資安標準 IEC 62443 在全球統一執行,不論客戶位於世界何處,Yokogawa 全球團隊均可提供相同成果。

參考
Saudi Aramco's operations span the globe and the energy industry. The world leader in crude oil production, Saudi Aramco also owns and operates an extensive network of refining and distribution facilities, and is responsible for gas processing and transportation installations that fuel Saudi Arabia's industrial sector. An array of international subsidiaries and joint ventures deliver crude oil and refined products to customers worldwide.
- 16,000 FOUNDATION Fieldbus devices
- Main Automation Contractor (MAC)
- DCS anywhere concept integration with site SAP system
- Long term maintenance contract
- Sustainable development
This white paper provides an overview of how Yokogawa believes its customers can best prepare for and position themselves to benefit from IIoT-enabled technology and solutions and digitalization in general to emerge as the successful connected industrial enterprises of the future.
yi-MAC stands for YOKOGAWA Innovative Main Automation Contractor:
- Full control of scope and schedule across packages
- Realization of customer expectation
- Single point of responsibility
- Providing fully integrated solutions
The ability to deliver a full scope of project execution capabilities is becoming more important than ever for automation suppliers that wish to compete on a global scale. Process automation suppliers have always had some degree of project execution capabilities, but only recently have suppliers and end users begun to realize the true economic impact that precise and comprehensive execution capabilities can have on the success of an automation project and on plant lifecycle costs.
The number of incidents involving attempted unauthorised access to computer systems via the internet as reported by CERT (Computer Emergency Response Team) was 137,539 in 2003. Statistics show an exponential increase in the number of reported incidents in the last five years. Although this can be partly explained by the increase in the number of computer systems in the world that are connected to the internet, it is nevertheless an alarming fact.
Yokogawa’s industrial automation (IA) product and service offerings, industry domain knowledge, and VigilantPlant approach – which emphasizes safe, secure, and uninterrupted operations -- provide a solid foundation for an Industrial Internet of Things that specifically addresses the requirements of process automation, particularly for the OT side of the equation. To be able to provide an equally solid foundation for the IT side, Yokogawa is partnering with Cisco Systems and other industry leaders.
Network and system security is now a necessity in process automation industry. YOKOGAWA provides a service lifecycle solution for cyber security to ensure that the security measures and deployments are continuously enhanced, monitored and inspected.
This white paper explains the details of the security design, implementation, operation and validation solutions from the technical perspective.
Initially when control and safety systems moved away from being hardwired and relay-based to computerized systems, vendors and asset owners were more interested in functionality than security. Typically, especially in high risk environments in refineries and off-shore oil installations, the systems were standalone with a dedicated Safety Instrumented System.
Over the last ten years more security solutions have available, and more industrial end users have implemented them to protect their businesses. Today nearly all companies use an anti-virus product installed on their industrial control system (ICS), as well as having their ICS segregated from the business network and the Internet by a firewall.
Harness the Future of Innovation
Highlights of the 2014 Yokogawa Users Conference and Exhibition
September 9 - 11, 2014, Houston, TX
By the editors of CONTROL Magazine
下載
產品型錄
- 生命周期性能關注服務 (3.8 MB)
- Cyber Security for Industrial Control Systems (3.0 MB)
想了解更多技術&解決方案嗎?
聯絡我們