資安顧問服務

客戶挑戰

資安已成為工業設施、製程廠及其他關鍵資產整體風險管理中的重要因素。隨著工業物聯網、雲端技術及工業4.0轉型進程,資安漏洞對安全與業務連續性的風險增加。實際上,OT資安在建立安全組織、規劃專業人力等方面,約落後於IT資安十年左右。

Yokogawa 資安顧問服務

Yokogawa 提供完整的資安顧問服務,協助客戶在工廠導入合適的資安解決方案,確保安全運行,同時適應新技術以提升效率與生產力。Yokogawa 的服務範圍涵蓋系統漏洞評估、稽核、制定資安政策、建議適當的防護措施,以降低資安風險並提升企業價值。

Yokogawa 可依國際資安標準對客戶的資安計畫進行稽核,協助識別、評估及減輕系統中的風險。

核心能力

資安標準與法規的專業知識

Yokogawa 致力於為客戶提供安全與資安卓越服務,因此工程師會持續更新與培訓,以符合全球資安標準。這展現了公司高水準的資安專業能力,也反映出長期承諾。Yokogawa 的資安顧問與工程師在各種資安標準、框架、法規與指引方面具備廣泛知識與經驗,包括 ISA/IEC 62443 系列、ISO/IEC 27000 系列、NIST CSF、NERC-CIP、GICSP 等。

ISA/IEC 62443:工業控制系統資安國際標準
IEC/ISO 27000:資訊安全管理系統國際標準
NIST CSF:美國國家標準與技術研究院資安框架
NERC CIP:北美電力可靠性公司關鍵基礎設施保護
GICSP:全球工業資安專業認證

資安實驗室

憑藉超過 100 年的 OT 核心業務與 IT 領域知識,Yokogawa 建立了專門的資安實驗室並在全球設有據點,形成完整的知識網絡,專家與顧問可隨時存取。

這些資安實驗室是 Yokogawa 資安活動的核心,作為專業中心,系統與資安專家可協作將最新資安技術應用於系統,以保護客戶免受日益複雜的資安威脅。

全生命週期價值:信任與夥伴關係

Yokogawa 擁有在新建與既有工廠提供工業自動化與服務的豐富經驗,了解各產業與工廠的資安需求差異。即使同產業可能面臨相似漏洞與威脅,每個工廠的後果與影響程度仍可能不同。因此,選擇一個能:

  • 充分了解客戶現場情況,
  • 具備 IT 與 OT 領域豐富知識,
  • 熟悉資安框架、產業標準、政府指引與法規,並不僅監控進度,而是積極塑造未來的夥伴,
  • 擁有全球產業成功案例的資安專家,

非常重要,能確保資安計畫在全球範圍內有效落實並創造持續價值。

參考

摘要:

Yokogawa's network healthiness check service helped the customer identify what they need to protect against cyber-attacks.
By “visualizing” network traffic in control system, the customer was able to detect unauthorized communication in their system.

產業別:
摘要:

yi-MAC stands for YOKOGAWA Innovative Main Automation Contractor:

  • Full control of scope and schedule across packages
  • Realization of customer expectation
  • Single point of responsibility
  • Providing fully integrated solutions
白皮書
摘要:

The number of incidents involving attempted unauthorised access to computer systems via the internet as reported by CERT (Computer Emergency Response Team) was 137,539 in 2003. Statistics show an exponential increase in the number of reported incidents in the last five years. Although this can be partly explained by the increase in the number of computer systems in the world that are connected to the internet, it is nevertheless an alarming fact.

摘要:

Yokogawa’s industrial automation (IA) product and service offerings, industry domain knowledge, and VigilantPlant approach – which emphasizes safe, secure, and uninterrupted operations -- provide a solid foundation for an Industrial Internet of Things that specifically addresses the requirements of process automation, particularly for the OT side of the equation. To be able to provide an equally solid foundation for the IT side, Yokogawa is partnering with Cisco Systems and other industry leaders.

摘要:

This white paper provides an overview of how Yokogawa believes its customers can best prepare for and position themselves to benefit from IIoT-enabled technology and solutions and digitalization in general to emerge as the successful connected industrial enterprises of the future.

摘要:

Network and system security is now a necessity in process automation industry. YOKOGAWA provides a service lifecycle solution for cyber security to ensure that the security measures and deployments are continuously enhanced, monitored and inspected.

This white paper explains the details of the security design, implementation, operation and validation solutions from the technical perspective.

摘要:

Initially when control and safety systems moved away from being hardwired and relay-based to computerized systems, vendors and asset owners were more interested in functionality than security. Typically, especially in high risk environments in refineries and off-shore oil installations, the systems were standalone with a dedicated Safety Instrumented System.

摘要:

Over the last ten years more security solutions have available, and more industrial end users have implemented them to protect their businesses. Today nearly all companies use an anti-virus product installed on their industrial control system (ICS), as well as having their ICS segregated from the business network and the Internet by a firewall.

摘要:

Harness the Future of Innovation
Highlights of the 2014 Yokogawa Users Conference and Exhibition
September 9 - 11, 2014, Houston, TX
By the editors of CONTROL Magazine   

下載

想了解更多技術&解決方案嗎?

聯絡我們

定頂