Industrial cybersecurity
4.4 Integrated security concept and security strategies
S7-1500R/H redundant system
System Manual, 01/2024, A5E41814787-AF
37
4.3.2 Objectives of industrial cybersecurity
The objectives of industrial cybersecurity are:
• Trouble-free operation and ensuring the availability of industrial plants and production
processes
• Preventing threats to people and production from cybersecurity attacks
• Protection of industrial communication against espionage and manipulation
• Protection of industrial automation systems and components against unauthorized access
and data loss
• Provision of a practical and cost-effective concept for securing existing plants and devices
without their own security functions
• Use of existing, open, and proven industrial security standards
• Compliance with legal requirements
An optimized and adapted security concept applies to automation and drive technology. The
security measures must not impede or endanger production.
4.4 Integrated security concept and security strategies
4.4.1 Comprehensive security concept "Defense in Depth"
With Defense in Depth, Siemens provides a multi-layer security concept that offers industrial
plants comprehensive and far-reaching protection in accordance with the recommendations
of the IEC 62443 international standard.
Productivity and know-how are protected on 3 levels:
Plant security
Plant security uses various methods to safeguard critical components from physical access by
people. This starts with classic building access and extends to securing sensitive areas using
access control (for example, code card, iris scan, fingerprint or access code).
Network security
Automation networks must be protected against unauthorized access. This is achieved
through security measures on the product, but also those in the product-related
environment.
To Next Page
Loading...
Need help?
General
