Managing Automation - November 2007 - (Page 38)

[ INDUSTRIES ] Transformation Integration TechWatch ple, relies on co-managed ser vices to protect status of security patches and antivirus software. more than 200 plants worldwide. The team also interviewed personnel to deterFortunately, good practices for securing IT mine how well they understand the security systems also apply to cyber-security for process process. “Even with the best security program, control systems. “We’ve found 80% to 90% of IT its effectiveness can be completely nullified if security practices can be applied directly to people aren’t aware of their responsibilities,” process control systems,” says Kevin Staggs, Staggs explains. global security architect at Honeywell Process SoAt the device level, certification programs for lutions. Security practices suitable for both IT controllers already exist. For example, the Mu and process control use include firewalls, intrusion detection, and “Even with the best security program, its effecencr yption. However, different tiveness can be completely nullified if people security practices may be needed to protect legacy SCADA systems aren’t aware of their responsibilities.” — Kevin that were never intended for use Staggs, Honeywell Process Solutions as network devices. Another likely exception is the security patch Security Industrial Control Certification (MUapplication process. Not only should vendors SIC), offered by Mu Security, a specialist in IT provide accreditation that patches are safe for certification that is moving into the industrial process systems, but timing should be set so space, validates that a controller is hardened there’s no loss of view or control. against malicious activity on IP or TCP/IP net“When our Honeywell Specialty Materials works and that it won’t be overwhelmed by high plant in Geismar, LA, deployed a Honeywell Exlevels of traffic. The first unit to receive the cerperion Process Knowltification is Honeywell’s Experion PKS C300 edge System (PKS), it Process Controller. managingautomation.com worked closely with HonUnder a Wurldtech Security Technologies coneywell corporate IT to entroller certification program, units from ABB, RELATED ARTICLES: Rethinking Supply Chains sure that all IT practices Yokogawa Electric Corp., Emerson Process Manwww.managingautomation.com/scm5 were followed and exagement, Invensys Process Systems–Triconex, The Unique Needs of Chemical Manufacturers ception specifications and ICS Triplex hold Achilles Level 1 Certification. www.managingautomation.com/chemicals were created where WHAT’S NEXT? Know Your Chemicals Regulations deviations from the corwww.managingautomation.com/regulations porate standard were Despite the chemical manufacturing industry’s Process Control Vendors Unite for Security needed,” Staggs says. progress, much remains to be accomplished. Sewww.managingautomation.com/security This was especially critcurity tools must be simpler to implement and Updated SCADA Security Software Released ical because the PKS sysmaintain. For example, virtually all automation www.managingautomation.com/SCADA tem, which controls prosystem security personnel need to configure and duction of hydrofluoric manage some sort of firewall or separation beCOMPANIES MENTIONED: acid, fluorocarbon refrigtween the automation and business networks. ABB erants, and Alcon resin, The task requires a relatively deep understanding www.managingautomation.com/ABB links with the complex’s of both firewalls and networks, and quickly Emerson Process Management building control system becomes time-consuming and prone to error, www.managingautomation.com/Emerson to integrate process conparticularly if a large number of devices are conHoneywell trol, physical control, and nected to the network. www.managingautomation.com/Honeywell cyber-security. “We need suppliers to increase the ease-ofICS Triplex Once a system is in use factor,” says Eric Cosman, engineering sowww.managingautomation.com/Triplex place, triennial or morelutions architect at Dow Chemical, who is a Industrial Defender, Inc. frequent audits help asmember of the Cyber Security Program Steering www.managingautomation.com/Defender sess performance. In a Team and serves as the steering team sponsor Invensys Process Systems – Triconex two-day visit to Geismar, for the program’s Manufacturing and Control www.managingautomation.com/Invensys Honeywell’s cyber-secuSystems Team. Mu Security rity audit team examined Finally, constant vigilance is needed. “Threats www.managingautomation.com/Mu the layers of defense are ever-changing,” says Neil Hershfield, CSCS Wurldtech Security Technologies around the controllers in program director and another Dow Chemical www.managingautomation.com/Wurldtech the network and the employee. “New ones emerge regularly.” Yokogawa Electric Corp. process control system Cosman advises: “Don’t think of this as a diet; www.managingautomation.com/Yokogawa itself, and checked the think of it as a lifestyle change.” ■ maonline ma November 38 2007 Industries http://managingautomation.com http://www.managingautomation.com/scm5 http://www.managingautomation.com/chemicals http://www.managingautomation.com/regulations http://www.managingautomation.com/security http://www.managingautomation.com/SCADA http://www.managingautomation.com/ABB http://www.managingautomation.com/Emerson http://www.managingautomation.com/Honeywell http://www.managingautomation.com/Triplex http://www.managingautomation.com/Defender http://www.managingautomation.com/Invensys http://www.managingautomation.com/Mu http://www.managingautomation.com/Wurldtech http://www.managingautomation.com/Yokogawa

Table of Contents Feed for the Digital Edition of Managing Automation - November 2007

Managing Automation - November 2007 Contents Take 1 Mailbox SAP's Business ByDesign to Validate On-Demand Model for Enterprise SW Portfolio Management Specialist Losing Ground to Rivals At Incor, It's Time for Some Deep Breathing Can HART, ISA Get Together on a Wireless Spec? Mesa Tries to Help Improve Plant Metrics Notes Cover Story: The Digital Factory Special Report: Breaking Down Walls Integration: Dreaming of One ERP Industries: Locking onto Cyber-Security Transformation: Not Your Father's Time & Attendance Program Product Scan Advertiser Index Next

Managing Automation - November 2007

For optimal viewing of this digital publication, please enable JavaScript and then refresh the page. If you would like to try to load the digital publication without using Flash Player detection, please click here.