PuK - Process Technology & Components 2024

Components
OT security
the implementation and performance
requirements period.
During the setting up and commissioning
they take care of the
network acceptance, during operation
they ensure condition
monitoring and predictive maintenance
through appropriate
service level agreements. They
are also there to provide advice
for plant retrofits and help with
network modifications. All these
tasks need three things: Knowhow,
the right hardware and services
suitable for the respective
period in the life of the plant.
Tools with integrated expertise
The times in which OT networks
were still islands independent
from the rest of the world are
largely in the past. The advantages
that can result from convergent
networks and direct access
to the smart sensor data of
the machines and plants are too
great. Therefore, OT networks are
increasingly internally linked to
the IT level. This also then means
that each component in which a
CPU is installed is vulnerable. The
topic of OT security is thus highly
interwoven with the hardware
used. The clou is that the solutions,
which have proven their
worth in recent years for the reliable
operation of networks with
the focus on predictive maintenance,
are also suitable for monitoring
network security. The system
is therefore now referred to
as a CM&SM (Fig. 2), a condition
monitoring & security management
system.
To ensure OT security, IEC
62443-3-3 sets various requirements,
which ultimately provide
the condition for the principle
of “Defence in Depth” (Fig. 3).
The requirements relate to identification
or authentication, use
control, system integrity, confidentiality
of the data, prompt response
to events and the availability
of the resources. Each of
these seven requirements needs
different tools or measures to
implement them. The various
solutions of Indu-Sol can help in
completely different areas. Here
are a few examples: An initial topology
scan for the identification
or authentication of OT networks
and a periodic scan, for example,
can be implemented and managed
with our condition monitoring
& security management
system. The tools of the network
experts check the data commu-
Fig. 4: OT cyber security and digitalisation in accordance with ISA/IEC 62443,
Part 3-3 (copyright holder: Indu-Sol)
nication for unwanted changes,
use encryption methods for secure
data transmission, segment
individual network areas for security
reasons, ensure continuous
data monitoring and auto-
Fig. 3: Excursus: ISA/IEC 62443 – The layers of defence in depth from the view of OT
(copyright holder: Indu-Sol)
service providers with the appropriate
know-how. Indu-Sol contributes
this know-how on an
equal footing within the scope of
an OT competence partnership.
The good news is that it is not
necessary to reinvent the wheel,
but instead, tried and tested solutions
are on hand to face these
new requirements confidently.
Fig. 2: Condition monitoring and security management system (CM&SM) for plants
and OT networks with Profinet and Ethernet/IP (Copyright holder: Indu-Sol)
mated alerting or help with the
backup and restoring of device
configurations.
The list of requirements
and how they can be met with
the system is long. One trend is
clear: With the requirements of
IEC 62443 and also the new Machinery
Regulation that will soon
come into effect, in future greater
focus will be placed on the OT
security of industrial communication
networks (Fig. 4). This requires
solutions in the form of
components, supporting systems
as well as skilled employees or
The Authors:
Denise Fritzsche,
Marketing at Indu-Sol and
Dipl.-Ing. (FH) Nora Crocoll,
Redaktionsbüro Stutensee
Indu-Sol GmbH, Schmoelln
www.indu-sol.com
PROCESS TECHNOLOGY & COMPONENTS 2024
105