E+C August 2018

round up

CYBER SECURITY

Cyber security asset inventory solution unveiled at PowerGen Africa

manually or use consultants to deliver the work. Currently, most companies maintain their cyber security asset inventory manu- ally which is time consuming, expensive, and results in their inventory being incom- plete. The new ABB Ability™ solution signif- icantly reduces the need for any manual collection and formatting of asset data. It automatically captures changes in the in- ventory and updates the industrial cyber asset inventory. Users benefit from an evergreen view to support vulnerability assessment efforts. For the first time, op- erations and security teams always have up-to-date cyber asset inventory, helping them to make better decisions about cyber security, life-cycle and asset management. ABB says that automating the cyber se- curity asset inventory process could save companies significant man hours. Susan Peterson-Sturm, ABB’s digital lead for Pow-

The new ABB Ability™ Cyber Security Asset Inventory is designed to reduce the time, cost and vulnerability associated with man- aging assets connected to online services. Launched during July at PowerGen 2018, the ABB Ability™ Cyber Security Asset Invento- ry will be introduced to customers in the power and water industry as of September and will later be rolled-out to all industries. Cyber security standards require opera- tors of critical infrastructure to assess their cyber security regularly. Typically, this is done every 12 to 24 months, depending on corporate policy or national standard. To do this, operators must first complete an in- ventory of the software, ports and services they have enabled within their control net- work. Until now there has been no global automated tool available that could collect the information and create such an inven- tory for operators' environments, meaning they either had to maintain their inventory

er and Water says, “The new solution re- duces system vulnerabilities by comparing behaviours. “In order to defend an environ- ment you must first understand it. Knowing expected normal behaviour will help spot anything out of the ordinary.Therefore rogue devices or applications can be identified. “ABB Ability™ Cyber Security Asset Inventory functions across most major control systems in the utilities space with- out impacting operations. The solution im- proves the strategic alignment of IT and operations, providing real-time visibility enabling both teams to work together ef- fectively to defend the plant network.” ABB Ability™ is a unified, cross-indus- try digital capability that combines deep domain expertise from device to edge to cloud, with unmatched experience in con- nectivity. Enquiries: Email media.relations@ch.abb.com

Meeting cyber security challenges in a connected world

consulting expertise in a ‘defence in depth’ strategy to prevent or minimise cyber attacks.This multi-pronged defence system adheres to IEC 62443 standards, and involves the creation of a multi-layered and multi-technology strategy to safeguard critical systems. This strategy is an implementation tool and a holistic security approach, which safeguards but also assesses, manages and mon- itors systems, with the help of Schneider Electric’s Portfolio Life Cycle Methodology. The cyber security team will assess, design, implement, monitor and maintain cybersecurity systems and train customers’ teams about security practices and introduce a security culture that leads to quick threat response and business continuity. Solutions • A dynamic ecosystem of partnerships and platforms, includ- ing governments, universities and suppliers that help drive re- search, policy and collaborative projects to produce a holistic, security-conscious offering. • An ISO conformant vulnerability management process that is activated upon external notification, vulnerability disclosure or customer report. • An advanced Global Threat Intelligence Centre that actively monitors cyberspace for threats to Schneider Electric products and customers. • 150+ products that are cyber security standards certified for electrical and process installations. • A team of cyber security experts who understand process re- quirements, enterprise needs and business environments. Enquiries: Prisca Mashanda. Tel. +27 (0) 11 254 6400 or email prisca.mashanda@schneider-electric.com

As business embraces the digital revolution through new technolo- gies, such as cloud computing and the Internet of Things (IoT), bar- riers are broken down, allowing for rapid growth and advancement. However, this opening up of platforms and increase in interconnect- ed systems also allows cyber criminals to enter and attack systems. The necessity for a comprehensive security strategy is acknowl- edged by more sectors as an integral part of standard operational risk management, particularly in such industries as oil & gas, elec- trical power plants, water plants and other key sectors. The disrup- tion of operational systems can have a far-reaching and potentially catastrophic impact. Special skills are needed to fortify defences, while keeping plants running smoothly. As a global technology solutions leader, Schneider Electric has vast industrial experience working with both InformationTechnology (IT) and Operational Technology (OT). This experience enables the company to collaborate with IT departments and third-party security solutions providers to develop precise and effective cyber security solutions that secure systems without hampering operational effi- ciency. Managing cyber security requires experts to be well versed with foundational knowledge of the systems they are working to protect. Having worked closely with clients to help plan and set up many of these control systems, Schneider Electric's cyber security team has gained deep knowledge and insight into what it takes to protect the safety, reliability and confidentiality of these OT systems.Their famil- iarity with the system architecture enables quicker identification of security risks and implementation of more targeted solutions, thus preventing wastage and plant downtime. Schneider Electric’s cyber security professionals are among the best the industry has to offer. It combines cyber security expertise, technical expertise and

Electricity + Control

AUGUST 2018

25