Efficient Plant January 2018 - 20

feature | operational strategies

+

ABOUT
THE
EXPERTS

MILLE GANDELSMAN is CTO of Indegy,
New York, where he leads the company's
technology research and product
development. Prior to Indegy, he led
engineering efforts for Stratoscale
and spent several years managing
cybersecurity research for Israel's elite
intelligence corps. Gandelsman is an IDF
Talpiot graduate with more than 15 years
of experience in ICS and cybersecurity.

YARIV LENCHNER is director of
product management for Indegy,
New York. He is an expert in ICS,
VoIP, IP networking, and call-center
technologies. Lenchner has held
technical management positions at
CyberArc, Nice Systems,
and RiT Technologies.

threats in real-time or even post attack.
Gandelsman and Lenchner note that it's
important to carefully consider these threats
and look into security controls that will help
prevent and detect such threats before they
take down operational processes and critical
services.
The ICS cybersecurity skills gap will
continue to grow. While the shortage of
skilled ICS cybersecurity professionals isn't
a new concern, the skills gap continues to
grow. Despite awareness of the need for
ICS cybersecurity, countless organizations
struggle to develop a strategy and place
skilled professionals in key roles.
Many, in fact, are still debating who
should be responsible for ICS security:

20

| EFFICIENTPLANTMAG.COM

Should it be the IT security operations
center (SOC) team, which is familiar with
cybersecurity best practices, yet lacks the
understanding of operational technologies
and their requirements? Or the operational team that knows and understands OT,
but isn't familiar with cybersecurity best
practices and is already over tasked with
the demanding work of maintaining and
ensuring operational safety, reliability, and
continuity?
According to Gandelsman and Lenchner,
the successful deployment of industrial cybersecurity projects must leverage resources
from IT and OT. Business-level oversight
and leadership helps ensure that the two
sides will collaborate effectively.

THE GOOD NEWS
Awareness of OT security gaps has been
growing. In 2017, more organizations
implemented ICS security solutions and in-

tegrated them with existing SOC tools, such
as SIEM (Security Information and Event
Management)) and incident-management
systems than in previous years.
As Gandelsman and Lenchner wrote, the
increase in security alerts generated from
ICS environments is raising awareness
among IT and executive management of
the critical security gaps that need to be
addressed in these environments.
Cybersecurity protection is critical for
industrial-building management/automation systems.
Buildings are typically not considered
critical infrastructure, yet they house operations such as data centers and healthcare
and government services. Building-management systems/building-automation
systems (BMS/BAS) centralize a wide range
of important control functions and services,
including HVAC, lighting, water and
wastewater management, fire-suppression
systems, closed-circuit television (CCTV),
and access control.
Since modern BMS/BAS systems are
often connected to the corporate network
and the internet to enable remote control
and management, they, too, are exposed to
cyberthreats. Gandelsman and Lenchner
caution that such systems, similar to many
industrial systems, haven't been designed

JANUARY 2018


http://www.EFFICIENTPLANTMAG.COM

Table of Contents for the Digital Edition of Efficient Plant January 2018

Efficient Plant January 2018 - 1
Efficient Plant January 2018 - Cover1
Efficient Plant January 2018 - GF1
Efficient Plant January 2018 - GF2
Efficient Plant January 2018 - Cover2
Efficient Plant January 2018 - 1
Efficient Plant January 2018 - 2
Efficient Plant January 2018 - 3
Efficient Plant January 2018 - 4
Efficient Plant January 2018 - 5
Efficient Plant January 2018 - 6
Efficient Plant January 2018 - 7
Efficient Plant January 2018 - 8
Efficient Plant January 2018 - 9
Efficient Plant January 2018 - 10
Efficient Plant January 2018 - 11
Efficient Plant January 2018 - 12
Efficient Plant January 2018 - 13
Efficient Plant January 2018 - 14
Efficient Plant January 2018 - 15
Efficient Plant January 2018 - 16
Efficient Plant January 2018 - 17
Efficient Plant January 2018 - 18
Efficient Plant January 2018 - 19
Efficient Plant January 2018 - 20
Efficient Plant January 2018 - 21
Efficient Plant January 2018 - 22
Efficient Plant January 2018 - 23
Efficient Plant January 2018 - 24
Efficient Plant January 2018 - 25
Efficient Plant January 2018 - 26
Efficient Plant January 2018 - 27
Efficient Plant January 2018 - 28
Efficient Plant January 2018 - 29
Efficient Plant January 2018 - 30
Efficient Plant January 2018 - 31
Efficient Plant January 2018 - 32
Efficient Plant January 2018 - 33
Efficient Plant January 2018 - 34
Efficient Plant January 2018 - 35
Efficient Plant January 2018 - 36
Efficient Plant January 2018 - 37
Efficient Plant January 2018 - 38
Efficient Plant January 2018 - 39
Efficient Plant January 2018 - 40
Efficient Plant January 2018 - 41
Efficient Plant January 2018 - 42
Efficient Plant January 2018 - 43
Efficient Plant January 2018 - 44
Efficient Plant January 2018 - 45
Efficient Plant January 2018 - 46
Efficient Plant January 2018 - 47
Efficient Plant January 2018 - 48
Efficient Plant January 2018 - Cover3
Efficient Plant January 2018 - Cover4
http://www.nxtbook.com/atp/MaintenanceTechnology/epmay2019
http://www.nxtbook.com/atp/MaintenanceTechnology/epapril2019
http://www.nxtbook.com/atp/MaintenanceTechnology/epmarch2019
http://www.nxtbook.com/atp/MaintenanceTechnology/epfebruary2019
http://www.nxtbook.com/atp/MaintenanceTechnology/epjanuary2019
http://www.nxtbook.com/atp/MaintenanceTechnology/epdecember2018
http://www.nxtbook.com/atp/MaintenanceTechnology/epnovember2018
http://www.nxtbook.com/atp/MaintenanceTechnology/epoctober2018
http://www.nxtbook.com/atp/MaintenanceTechnology/epseptember2019
http://www.nxtbook.com/atp/MaintenanceTechnology/epaugust2018
http://www.nxtbook.com/atp/MaintenanceTechnology/0818schneider
http://www.nxtbook.com/atp/MaintenanceTechnology/epjuly2018
http://www.nxtbook.com/atp/MaintenanceTechnology/epjune2018
http://www.nxtbook.com/atp/MaintenanceTechnology/epmay2018
http://www.nxtbook.com/atp/MaintenanceTechnology/epapril2018
http://www.nxtbook.com/atp/MaintenanceTechnology/epmarch2018
http://www.nxtbook.com/atp/MaintenanceTechnology/epfebruary2018
http://www.nxtbook.com/atp/MaintenanceTechnology/epjanuary2018
http://www.nxtbook.com/atp/MaintenanceTechnology/epdecember2017
http://www.nxtbook.com/atp/MaintenanceTechnology/epnovember2017
http://www.nxtbook.com/atp/MaintenanceTechnology/epoctober2017
http://www.nxtbook.com/atp/MaintenanceTechnology/mtsept2017
http://www.nxtbook.com/atp/MaintenanceTechnology/mtaugust2017
http://www.nxtbook.com/atp/MaintenanceTechnology/mtjuly2017
http://www.nxtbook.com/atp/MaintenanceTechnology/mtjune2017
http://www.nxtbook.com/atp/MaintenanceTechnology/mtmay2017
http://www.nxtbook.com/atp/MaintenanceTechnology/mtapril2017
http://www.nxtbook.com/atp/MaintenanceTechnology/mtmarch2017
http://www.nxtbook.com/atp/MaintenanceTechnology/mtfebruary2017
http://www.nxtbook.com/atp/MaintenanceTechnology/mtjanuary2017
http://www.nxtbook.com/atp/MaintenanceTechnology/mtdecember2016
http://www.nxtbook.com/atp/MaintenanceTechnology/mtnovember2016
http://www.nxtbook.com/atp/MaintenanceTechnology/mtoctober2016
http://www.nxtbook.com/atp/MaintenanceTechnology/mtseptember2016
http://www.nxtbook.com/atp/MaintenanceTechnology/mtaugust2016
http://www.nxtbook.com/atp/MaintenanceTechnology/mtjuly2016
http://www.nxtbook.com/atp/MaintenanceTechnology/mtjune2016
http://www.nxtbook.com/atp/MaintenanceTechnology/mtmay2016
http://www.nxtbook.com/atp/MaintenanceTechnology/mtapril2016
http://www.nxtbook.com/atp/MaintenanceTechnology/mtmarch2016
http://www.nxtbook.com/atp/MaintenanceTechnology/mtfebruary2016
http://www.nxtbook.com/atp/MaintenanceTechnology/mtjanuary2016
http://www.nxtbook.com/atp/MaintenanceTechnology/mtdecember2015
http://www.nxtbook.com/atp/MaintenanceTechnology/mtnovember2015
http://www.nxtbook.com/atp/MaintenanceTechnology/mtoctober2015
http://www.nxtbook.com/atp/MaintenanceTechnology/mtseptember2015
http://www.nxtbook.com/atp/MaintenanceTechnology/MTAugust2015
http://www.nxtbook.com/atp/MaintenanceTechnology/MTJuly2015
http://www.nxtbook.com/atp/MaintenanceTechnology/MTJune2015
http://www.nxtbook.com/atp/MaintenanceTechnology/M
http://www.nxtbook.com/atp/MaintenanceTechnology/0415endress
http://www.nxtbook.com/atp/MaintenanceTechnology/MTApril2015
http://www.nxtbook.com/atp/MaintenanceTechnology/MTMarch2015
http://www.nxtbook.com/atp/MaintenanceTechnology/MTFebruary2015
http://www.nxtbook.com/atp/MaintenanceTechnology/MTJanuary2015
http://www.nxtbook.com/atp/MaintenanceTechnology/MTDecember2014
http://www.nxtbook.com/atp/MaintenanceTechnology/MTNovember2014
http://www.nxtbook.com/atp/MaintenanceTechnology/MTOctober2014
http://www.nxtbook.com/atp/MaintenanceTechnology/MTSeptember2014
http://www.nxtbook.com/atp/MaintenanceTechnology/MTAugust2014
http://www.nxtbook.com/atp/MaintenanceTechnology/MTJuly2014
http://www.nxtbookMEDIA.com