ABB Process Automation, September 2014

Similar documents
Continuous protection to reduce risk and maintain production availability

ABB Ability Cyber Security Services Protection against cyber threats takes ability

SYMANTEC: SECURITY ADVISORY SERVICES. Symantec Security Advisory Services The World Leader in Information Security

Factsheet. Power Generation Service Energy efficiency in power generation and water

The Information Age has brought enormous

DATA SHEET RISK & CYBERSECURITY PRACTICE EMPOWERING CUSTOMERS TO TAKE COMMAND OF THEIR EVOLVING RISK & CYBERSECURITY POSTURE

Information Infrastructure and Security. The value of smart manufacturing begins with a secure and reliable infrastructure

Nebraska CERT Conference

Industrial Security - Protecting productivity. Industrial Security in Pharmaanlagen

Internet of Things. The Digital Oilfield: Security in SCADA and Process Control. Mahyar Khosravi

Control Systems Cyber Security Awareness

In the wrong hands it s an open invitation

Lindström Tomas Cyber security from ABB System 800xA PA-SE-XA

Service. Sentry Cyber Security Gain protection against sophisticated and persistent security threats through our layered cyber defense solution

Cyber Security for Process Control Systems ABB's view

Trends in Cybersecurity in the Water Industry A Strategic Approach to Mitigate Control System Risk

April 2010 Power Systems division A brief introduction. ABB Group August 25, 2011 Slide 1

Lifecycle Performance Care Services. Bulletin 43D02A00-04EN

INSIDE. Integrated Security: Creating the Secure Enterprise. Symantec Enterprise Security

Defence services. Independent systems and technology advice that delivers real value. Systems and Engineering Technology

Digital Wind Cyber Security from GE Renewable Energy

Incident Response. Tony Drewitt Head of Consultancy IT Governance Ltd

SOLUTION BRIEF esentire Risk Advisory and Managed Prevention (RAMP)

Cyber Security Solutions Mitigating risk and enhancing plant reliability

align security instill confidence

Plant Security Services Protecting productivity in the digital era October

Back to the Future Cyber Security

Your experts for coal assets

IEC A cybersecurity standard approaching the Rail IoT

Addressing the elephant in the operating room: a look at medical device security programs

Cyber Security. June 2015

Cyber security - why and how

System 800xA Cyber Security Maximizing cyber security in process automation

Harsh Environment Solutions

Gujarat Forensic Sciences University

Security in a Converging IT/OT World

SOLUTION BRIEF RSA ARCHER IT & SECURITY RISK MANAGEMENT

Optimizing wind farms

Cybersecurity Training

The future of nuclear is here

Cyber Security Technologies

Cisco Secure Ops Solution

HVDC CARE. Lifecycle Services for HVDC Your uptime insurance

PROCESS SAFETY from POINT A to POINT Zed

Indegy. Industrial Cyber Security. ISA New Orleans Section. Applying the NIST Framework February 6, 2018

Industrial control systems

Symantec Security Monitoring Services

Cybersecurity and Hospitals: A Board Perspective

Accelerate Your Enterprise Private Cloud Initiative

Skybox Security Vulnerability Management Survey 2012

THE POWER OF TECH-SAVVY BOARDS:

Business Continuity Planning

solar

Cybersecurity for Health Care Providers

Version: V2.0. Integrated Building. Architecture. 19 April dimension data advanced infrastructure

Cybersecurity: Considerations for Internal Audit. Gina Gondron Senior Manager Frazier & Deeter Geek Week August 10, 2016

Security Monitoring Engineer / (NY or NC) Director, Information Security. New York, NY or Winston-Salem, NC. Location:

Securing Industrial Control Systems

Solution Oil & Gas. tgood.com

Protecting productivity with Industrial Security Services

Presenter Jakob Drescher. Industry. Measures used to protect assets against computer threats. Covers both intentional and unintentional attacks.

Safety Expert Council Day 2 Business Strategy t Review

Introducing the 9202-ETS MTL Tofino industrial Ethernet security appliance

Vulnerability Management Policy

ISA99 - Industrial Automation and Controls Systems Security

Technical Reference [Draft] DRAFT CIP Cyber Security - Supply Chain Management November 2, 2016

Florida Government Finance Officers Association. Staying Secure when Transforming to a Digital Government

Business continuity management and cyber resiliency

RKNEAL Verve Security Center Supports Effective, Efficient Cybersecurity Management

Executive summary. by Michel Bonnet, Maximilien Laforge, and Jean-Baptiste Samuel

No Industry 4.0 without Security

Continuous Monitoring and Incident Response

Cyber Risk Program Maturity Assessment UNDERSTAND AND MANAGE YOUR ORGANIZATION S CYBER RISK.

DATA SHEET RSA NETWITNESS PLATFORM PROFESSIONAL SERVICES ACCELERATE TIME-TO-VALUE & MAXIMIZE ROI

Manchester Metropolitan University Information Security Strategy

BUILDING CYBERSECURITY CAPABILITY, MATURITY, RESILIENCE

Automated Patch Management Service

T22 - Industrial Control System Security

COST OF CYBER CRIME STUDY INSIGHTS ON THE SECURITY INVESTMENTS THAT MAKE A DIFFERENCE

ISACA GEEK WEEK SECURITY MANAGEMENT TO ENTERPRISE RISK MANAGEMENT USING THE ISO FRAMEWORK AUGUST 19, 2015

IBM Global Technology Services Provide around-the-clock expertise and protect against Internet threats.

EXPERT SERVICES FOR IoT CYBERSECURITY AND RISK MANAGEMENT. An Insight Cyber White Paper. Copyright Insight Cyber All rights reserved.

Cities, Infrastructure & Industrial Solutions

NERC CIP VERSION 6 BACKGROUND COMPLIANCE HIGHLIGHTS

Securing Network Devices with the IEC Standard What You Should Know. Vance Chen Product Manager

CA Security Management

CYBER RESILIENCE & INCIDENT RESPONSE

ITSM20F_Umang. Number: ITSM20F Passing Score: 800 Time Limit: 120 min File Version: 4.0. Exin ITSM20F

Cisco ASA 5500 Series IPS Edition for the Enterprise

Six Weeks to Security Operations The AMP Story. Mike Byrne Cyber Security AMP

2018 GLOBAL CHANNEL PARTNER SURVEY THYCOTIC CHANNEL PARTNER SURVEY REPORT

STANDARD ELECTRIC UNIVERSITY

Chapter 18 SaskPower Managing the Risk of Cyber Incidents 1.0 MAIN POINTS

Mark Littlejohn June 23, 2016 DON T GO IT ALONE. Achieving Cyber Security using Managed Services

Symantec Enterprise Support Services Manage IT Risk. Maximize IT Performance.

locuz.com SOC Services

ICS Cybersecurity. SANS Top 20 Critical Controls for ICS. David Van Crout

Cyber Defense Maturity Scorecard DEFINING CYBERSECURITY MATURITY ACROSS KEY DOMAINS

*** THIS DOCUMENT IS CLASSIFIED FOR PUBLIC ACCESS ***

IoT & SCADA Cyber Security Services

Transcription:

ABB Process Automation, September 2014 ABB Process Automation Services Services that add life to your products, systems and processes September 26, 2014 Slide 1 1

ABB Process Automation Services A proven leader ABB ranked #1 in supplier-provided services of all automation companies worldwide by ARC 20,000 service employees in the field Serving customers in over 100 countries September 26, 2014 Slide 2 2

ABB Process Automation Services We understand your equipment and processes Equipment types Process Control Systems Quality Control Systems Turbine Control Systems Instrumentation and Analyzers Drives & Drive Systems Medium Voltage Drives Motors Marine Propulsion Systems Cranes Electrical systems Industries Cement Chemicals Crane Marine Metals Mining Oil & Gas Pulp & Paper Turbocharging Utilities September 26, 2014 Slide 3 3

ABB Process Automation Services We help solve your business challenges Your challenges: Over-allocated resources performing services, leading to lost production and inefficiency Limited capital driving need to extend asset life Fewer technical and process skills; training, headcount, retirement and retention issues Environmental, health and safety compliance Energy cost continues as a long-term concern Fewer lines running and fewer orders drive need to ensure plant and production reliability September 26, 2014 Slide 4 4

ABB Process Automation Services We address your entire asset lifecycle ABB Service Portfolio Design & Construction Installation & Commissioning Warranty & Post-warranty Front-end engineering Detail Engineering Equipment selection & procurement Construction Commissioning Start-up Operation Lifetime extensions Decommissioning Spares and Consumables Installation and Commissioning Training Maintenance Repairs Preventive Maintenance Advanced Services Extensions, Upgrades and Retrofits Replacement End-of-Life Services Engineering and Consulting (Asset Lifecycle, Energy Efficiency, Process Safety) September 26, 2014 Slide 5 5

ABB Process Automation Services We care for your needs Rapid Response We guarantee fast and flexible service response to maximize your equipment availability. Lifecycle Management We provide you powerful tools and our knowledge base to optimize and extend the lifecycle of your equipment. Performance Improvement We are your strategic partner to improve productivity, usability, reliability, cost-efficiency and energy-efficiency. Operational Efficiency We optimize the usability and efficiency of your equipment and systems to increase productivity. September 26, 2014 Slide 6 6

ABB Process Automation Services Lifecycle Management Lifecycle Management We provide you powerful tools and our knowledge base to optimize and extend the lifecycle of your equipment. Issues we typically see: Requirements for additional capacity Financial justification needed for upgrades/evolution Limited capital available Control systems and software obsolescence issues Additional production needed Goals and objectives: Extend system life Improve system response Plan for lifecycle, evolution and upgrades Certification and compliance with Safety, Health and Environmental September 26, 2014 Slide 7 7

Advanced Services System Performance Monitoring September 26, 2014 Slide 8 8

Advanced Services Benchmark Fingerprint Health Check Rapid Response Performance Improvement Lifecyle Management Operational Efficiency Control systems are robust by design and development and therefore tolerant towards occurring issues. Non-optimal system settings and conditions often do not cause incidents immediately, but might result in disturbances over time. Advanced Services provide continuous improvement for automation and processes through a systematic approach to problem-solving and a pro-active commitment to service. Sophisticated report simplifies management decision process by focusing on high impact opportunities for improvement Improvement plan provides clear path to quickly closing performance gaps Provides a solid foundation for continuous improvement based on data analysis methodology. September 26, 2014 Slide 9 9

Advanced Services Benchmark Reports Benchmark Report Status Overview Control system KPI status verification An easy to read Traffic Light control system report Effective tool for identifying performance issues Analyzes most relevant system parameters and KPI s Shows the system status and highlight deviations and potential risks May 15, 2009 Slide 10 10

Advanced Services Benchmark Reports Benchmark Report Status Overview Automatic data collection Automatic data analysis Automatic report generation Easy-to-use tool Summarizing results in table format with short KPI definition Traffic light assessment good ambiguous incorrect May 15, 2009 Slide 11 11

Advanced Services Fingerprint Rapid Response Performance Improvement Lifecyle Management Operational Efficiency System Fingerprint is a complete audit of control system status and performance, including analysis, impact and recommendations Reduces risk and increases uptime through proactive maintenance Increases system performance, availability and reliability Bridges performance gaps with in-depth analysis and recommendations September 26, 2014 Slide 12 12

Advanced Services Health Check Rapid Response Performance Improvement Lifecyle Management Operational Efficiency Comprehensive evaluation of critical areas that affect system performance, including hardware, software, firmware, system and Ethernet communications, and current maintenance practice Reduce maintenance cost Improve system maintainability Reduce component failures Enhance system performance September 26, 2014 Slide 13 13

Advanced Services System 800xA Benchmark Reports Software Status Report Validates the software installation against the requirements of ABB releases Performance Status Report Validates hardware and software components and runtime parameters against system requirements and best practices 14

Advanced Services Scope of 800xA data collection and analysis 15

Advanced Services Advant MOD 300 Benchmark Reports Validates hardware and software components and runtime parameters against system requirements and best practices Device Status System State System Performance Check CPU Load CCF Load Memory Pool Usage Message Statistics MOD 300 Message Statistics DCN Statistics Current Utilization of Control Network Check Maximum Utilization of Control Network Check 16

Advant MOD 300 Benchmark Scope of Data Collection and Analysis 1) 1) 1) covered in System 800xA Benchmark 17

Advanced Services Cyber Security September 26, 2014 Slide 18 18

Cyber Security In the News Some press articles In the News http://www.bloomberg.com/news/2014-06-30/symantec-warns-energetic-bear-hackers-threaten-energy-firms.html 19

Cyber Security 2014 Control System Attacks Control Systems need to be patched in order to avoid vulnerability Vulnerabilities of systems are reported on the ICS-CERT web page (Home Land Security) Frequency of cases and frequency of attacks within the last 2 months are on the rise General Announcements DCS, SCADA, PLC, September 26, 2014 Slide 20 Home Land Security http://ics-cert.us-cert.gov/#recentlypublished 20

Cyber Security 2014 Control System Attacks Industry has become a key target for attackers The number of attacks on control systems has been rising dramatically since end of June! 1000 attacks on utility companies on July, 1 1500 attacks on oil & gas companies on June, 23 Attacks on all companies in energy and oil sector in Norway on August 28 Home land security reports show that control systems have also become vulnerable. Siemens in May, July (WinCC), and August (S7-1500) Honeywell in July (web controller) Emerson DeltaV in May Yokogawa Centum in July ABB IED in July Copa Data SCADA in June Omron in July Schneider Wonderware in August Without cyber security measures including security updates and patching this creates a potential risk September 26, 2014 Slide 21 21

Cyber Security More 2014 Control System Attacks NEW http://hackmageddon.com/2014-cyber-attacks-timeline-master-index/ September 26, 2014 Slide 22 22

Cyber Security Common Risks and Threats just a few examples? RISKS Hacking RAT SWC Malicious software Employee Mistake THREATS Manipulated User Profiles, e.g. (remote) access by strangers Manipulated PC Configurations, PCs become RAT holes Theft of valuable information, e.g. intellectual property (recipes, control strategy) Potential for Sabotage, e.g. loss of control, modified control parameters RAT Remote Access Trojan, SWC - Strategic Web Compromise http://www.controlglobal.com/multimedia/2013/what-is-cyber-security-and-why-is-it-important/ 23

Cyber Security Why is it now an issue for Control Systems? 24

Cyber Security Home Land Security View on attack points September 26, 2014 Slide 25 http://ics-cert.us-cert.gov/content/overview-cyber-vulnerabilities 25

Cyber Security Defense Measures The coordinated use of multiple security measures, addressing people, technology, and operations Procedures and Policies Physical Security Security Updates User Access Control Intrusion Protection Intrusion Detection High availability solutions Protect Against Security Threats Only available for supported versions 26

26.09.2014 Cyber Security Security Update Service Rapid Lifecycle Response Management Operational Performance Efficiency Improvement Using ABB Windows Security Update Service (WSUS), the latest security updates can be immediately deployed after daily validation and approval by ABB. Control system always updated with the latest patches System performance and security on the highest level Minimize user efforts in evaluating, installing and testing of security patches and updates Reduce the risk of introducing an unauthorized patch into a running system Enhance safety and security against cyberattacks and cyber threats 27

Summary September 26, 2014 Slide 28 28

ABB Control Technologies Services Services that add life to your products, systems and processes Rapid Response Training Life Cycle Parts Services Lifecycle Management ServicePro System Evolution Operational Efficiency Automation Sentinel Performance Improvement My Control System Advanced Services Service Agreement Consulting ServicePort September 26, 2014 Slide 29 29

ABB Process Automation Services Our claim and commitment to our customers We respond rapidly, manage your investment lifecycle, improve performance and enhance operational efficiency With over 20,000 trained experts in 100 countries, no other company can respond more quickly with a deeper understanding of your systems and processes We maintain the highest competence in automation and production processes so problems are solved quickly, correctly and safely By helping you plan for your entire asset lifecycle, process disruptions are minimized, risks are mitigated, and sustainable improvements are achieved Our portfolio aligns with your strategy to ensure business goals are met as cost effectively as possible September 26, 2014 Slide 30 30

Questions September 26, 2014 Slide 31 31

September 26, 2014 Slide 32 9AKK106281 32