Cyber Security

Dear Expert,

    We are engage in a project where we should implement Siemens Cyber security concept. The plant is actually having different system and the following are:

1. Emerson Delta V DCS Main control system in the plant

2. Siemens IPC box and S7 400H as a third party control system.

Requirements.

The plant owner is requesting to implement the cyber security for all control system i.e. DELTA V and SIEMENS.

Emerson cyber security is already planned and the following are:

Mcafee ePO server, automatic windows update, automatic antivirus update, SIEM, Patch management, whitelisting. 

The plant owner would like also to provide the same for the Siemens control system.

• support Automatic backup of specific folders containing SQL databases along with restore procedure. This can be done by simple file transfer mechanism or through Acronis which Emerson is using for their system. Any licensing requirements must be consider.
• support approving windows updates and security patches on WSUS server. can be supported?
• support the installation of McAfee ePO Agent and Antivirus pushed from central antivirus server. can be supported?
• can support testing whitelisting/SIEM can be supported?
• can join plant domain under a separate GPO if required by end-user. As per Emerson input, can be supported?

Thank you!

Hi Juding,

Maybe this page could help you: https://www.siemens.com/industrialsecurity

If you need more help I suggest to make a Support Request.

BR,

Noodles

Hi! Expert,

        Please someone confirm in Cyber Security concept that if the current operating system Windows 7 Ultimate 32 BIT is use with WinCC V7.3 in IPCBOX is the windows updates are still available? Is it mandatory to update the windows regularly? will it not be destroy the WinCC because I have notice in Window 10 LSTB OS It doesn't required to updates the windows. please someone clear out the necessity of windows updates with siemens machine.

Hello,

in my opinion, genrally I'll be very carefuly with some Win Updates on used <PCs> because of some problems with compatibility with existing things. This can be maybe with difference of 2 types of updates, ask IT or check here in Forum about compatibility with Win Updates. This isn't easy problematic, in one side our system turning you to better security, on another side your existing SW can be not functional due some specific updates.