With physical security, we understand the need to include the protection of key assets such as property, people and the environment. With cyber security, our concerns are focused on the preservation of another set of key assets:
Process control systems are benefiting from the economies of open commodity hardware and software platforms. With these benefits comes the exposure to the threats of hackers, worms and viruses. There are safeguards that neutralize these threats.
Honeywell offers a foundation of process control network (PCN) security services that focuses on the preservation of confidentiality, integrity of data and availability of the network. These services offer key elements to aid in securing a process control network including assessment, design, implementation and network security management.
A PCN Security Assessment Service establishes a baseline of the current security processes, procedures and safeguards used to protect a process control network from external threats. The baseline is used to create a documented set of recommendations that outlines procedures and changes to the environment that will mitigate identified vulnerabilities.
The PCN Security Design Service provides a detailed design of the security infrastructure connecting a process control network to a company’s plant information network. The design work is performed by Honeywell security engineers and includes a list of all hardware and software needed to implement the design, along with detailed descriptions on how to configure and use the security infrastructure. Initial steps in the design process include the collection of customer needs, analysis of requirements, including adherence to policies and regulations. The PCN Security Design Service provides topology and physical network diagrams of the PCN Security Design.
The PCN Security Implementation Service is a follow-up to the PCN Security Design Service. Honeywell security engineers come on-site to implement the PCN security design. This implementation can be accomplished with the participation of the customer’s process control and network security personnel. The result of the implementation service is a fully functional PCN security infrastructure, which can be turned over to the customer’s process control group, IT department or to Honeywell’s Remote Services Center.
PCN Security Management Services are delivered from a secure Remote Services Center. These services may be combined with on-site Honeywell personnel or with on-site customer personnel to create a comprehensive security management solution.
PCN Security Management Services are delivered by Honeywell engineers 24 hours a day, seven days a week and include: