Siemens SINAMICS - Security Management

considered with regard to security so that Siemens already applies the same security standards
when purchasing as for the manufacture of its own products.
0RQLWRULQJRIWKH
UHVLGXDOULVNLQRUGHUWR
LPSURYHWKHVHFXULW\
FRQFHSWZKHQUHTXLUHG
HJZKHQQHZWKUHDWV
DSSHDU
6HOHFWLRQDQG
LPSOHPHQWDWLRQRI
VXLWDEOHPHDVXUHVLQ
RUGHUWRIXOILOOWKH
VWLSXODWHGUHTXLUH
PHQWVHJFHOO
SURWHFWLRQFRQFHSW
6HFXULW\UHTXLUHPHQWV
PXVWEHIXOILOOHGE\WKH
,7LQIUDVWUXFWXUHDQG
,7SURFHVVHVEDVHG
RQLQWHUQDWLRQDO
VWDQGDUGV,(&
DQG,62
6LJQLILFDQFHRI
NQRZKRZSURWHFWLRQ
DQGSURGXFWLQWHJULW\
IRUWKHFRPSDQ\
3URGXFWVDQG
EXVLQHVVDUHDVWDNHQ
LQWRDFFRXQWLQWKH
+ROLVWLF6HFXULW\
&RQFHSW
0RQLWRULQJRI
5HVLGXDO5LVN
3URWHFWLRQ
&RQFHSW
7DUJHW
3URWHFWLRQ
/HYHO
%XVLQHVV
,PSDFW
$VVHVVPHQW
6FRSH
Figure 3-1 SI HSC security management process
Standards and regulations
Siemens complies with the valid standards and regulations in the industrial security area
throughout the entire development process:
● ISO 2700X: Management of information security risks
● IEC 62443: IT security for industrial higher-level control systems – network and system
protection
3.4 Security management
The security management process as a basis
Protect your system and your company. Security management according to IEC 62443 and
ISO 27001 forms the basis for the successful implementation of Industrial Security.
The security management process is shown in the following:
Industrial Security
3.4 Security management
Industrial Security
16 Configuration Manual, 08/2017, A5E36912609A