AN INTERVIEW WITHMR PHILIP TAYLOR | IN FOCUS
In short, plant security In an effort to keep up includes proactive with current trends, Network security offers avoidance of security many businesses are protection for industrial gaps, such as providing making the shift to continuous updates, digitalisation. How communication systems comprehensive monitoring would you advise against unauthorised of plants and a transparent these businesses to go access from the Internet, view of the plant’s about this transition security status to adapt effectively and safely? which can be facilitated by quickly to cyber threats. installing a VPN to secure Network security offers Due to rapid technological networks and firewall to protection for industrial advancements and communication systems increased competition in control data exchange and against unauthorised the market, many companies unauthorised traffic, for access from the Internet, have acknowledged that which can be facilitated by example. the journey towards installing a VPN to secure digitalisation has become a networks and firewall to necessity in order to remain control data exchange and competitive. However, not unauthorised traffic, for example. Lastly, system all know where to start. integrity refers to protection of automation systems and control components against threats such as The transition towards digitalisation is an incremental unauthorised reproduction and restrict access process based on the current state of the company’s following the minimum privilege principle up to full facilities. Currently, there is a critical capability gap locking. Integrating all three of these core elements in the region, as we see that while companies are would ensure a complete and efficient security keen to digitalise their existing setups, they are not support system for today’s Digital Enterprises. equipped with the knowledge and technical expertise to do so. Hence, we at Siemens work very closely with In the age of IoT, security risks are becoming our customers to guide them in their digitalisation more prevalent due to the fact that every roadmap. First we assess the company’s individual device is connected to the internet including pain points, then we discuss potential ideas Smartphones and other gadgets of employees. with them, and ultimately provide How can organisations better protect their tailored solutions that would data from hackers. help them optimise their value chain, increasing flexibility, Companies and most importantly, their employees, shorten time-to-market can prepare for and prevent risk of downtimes due and improve efficiency to cyber attacks by adopting a proactive approach. for their business in This includes regularly updating security systems, the long run. providing high transparency in budget planning for cybersecurity solutions and having 24-hour access What are your to security experts that can work immediately as and predictions when a crisis arises. with regards to Some elements of our Siemens offerings to help organisations protect data from cyber attacks comprise
• • •
A whole set of Plant Security Services, ranging from risk assessments up to remote management of Security incident and event management in our Cyber Security Operation Centers (CSOC) Certification of automation systems (e.g. PCS7) based on 62443-3-3 And what is more, our products like SCALANCE and Ruggedcom switches and routers are developed according to “secure by design” development processes referring to IEC 62443-4-1.
cybersecurity in the remaining part of 2017? Do you anticipate any upcoming major attacks?
This year, we will continue to see investments in cybersecurity solutions as well as a heightened focus to extend the knowledge and skill sets of employees through training programs to non-IT professionals.
September / October 2017 • Security Solutions Today
149