Efficient Plant January 2018 - 20

feature | operational strategies

+

ABOUT
THE
EXPERTS

MILLE GANDELSMAN is CTO of Indegy,
New York, where he leads the company's
technology research and product
development. Prior to Indegy, he led
engineering efforts for Stratoscale
and spent several years managing
cybersecurity research for Israel's elite
intelligence corps. Gandelsman is an IDF
Talpiot graduate with more than 15 years
of experience in ICS and cybersecurity.

YARIV LENCHNER is director of
product management for Indegy,
New York. He is an expert in ICS,
VoIP, IP networking, and call-center
technologies. Lenchner has held
technical management positions at
CyberArc, Nice Systems,
and RiT Technologies.

threats in real-time or even post attack.
Gandelsman and Lenchner note that it's
important to carefully consider these threats
and look into security controls that will help
prevent and detect such threats before they
take down operational processes and critical
services.
The ICS cybersecurity skills gap will
continue to grow. While the shortage of
skilled ICS cybersecurity professionals isn't
a new concern, the skills gap continues to
grow. Despite awareness of the need for
ICS cybersecurity, countless organizations
struggle to develop a strategy and place
skilled professionals in key roles.
Many, in fact, are still debating who
should be responsible for ICS security:

20

| EFFICIENTPLANTMAG.COM

Should it be the IT security operations
center (SOC) team, which is familiar with
cybersecurity best practices, yet lacks the
understanding of operational technologies
and their requirements? Or the operational team that knows and understands OT,
but isn't familiar with cybersecurity best
practices and is already over tasked with
the demanding work of maintaining and
ensuring operational safety, reliability, and
continuity?
According to Gandelsman and Lenchner,
the successful deployment of industrial cybersecurity projects must leverage resources
from IT and OT. Business-level oversight
and leadership helps ensure that the two
sides will collaborate effectively.

THE GOOD NEWS
Awareness of OT security gaps has been
growing. In 2017, more organizations
implemented ICS security solutions and in-

tegrated them with existing SOC tools, such
as SIEM (Security Information and Event
Management)) and incident-management
systems than in previous years.
As Gandelsman and Lenchner wrote, the
increase in security alerts generated from
ICS environments is raising awareness
among IT and executive management of
the critical security gaps that need to be
addressed in these environments.
Cybersecurity protection is critical for
industrial-building management/automation systems.
Buildings are typically not considered
critical infrastructure, yet they house operations such as data centers and healthcare
and government services. Building-management systems/building-automation
systems (BMS/BAS) centralize a wide range
of important control functions and services,
including HVAC, lighting, water and
wastewater management, fire-suppression
systems, closed-circuit television (CCTV),
and access control.
Since modern BMS/BAS systems are
often connected to the corporate network
and the internet to enable remote control
and management, they, too, are exposed to
cyberthreats. Gandelsman and Lenchner
caution that such systems, similar to many
industrial systems, haven't been designed

JANUARY 2018


http://www.EFFICIENTPLANTMAG.COM

Table of Contents for the Digital Edition of Efficient Plant January 2018

Efficient Plant January 2018 - 1
Efficient Plant January 2018 - Cover1
Efficient Plant January 2018 - GF1
Efficient Plant January 2018 - GF2
Efficient Plant January 2018 - Cover2
Efficient Plant January 2018 - 1
Efficient Plant January 2018 - 2
Efficient Plant January 2018 - 3
Efficient Plant January 2018 - 4
Efficient Plant January 2018 - 5
Efficient Plant January 2018 - 6
Efficient Plant January 2018 - 7
Efficient Plant January 2018 - 8
Efficient Plant January 2018 - 9
Efficient Plant January 2018 - 10
Efficient Plant January 2018 - 11
Efficient Plant January 2018 - 12
Efficient Plant January 2018 - 13
Efficient Plant January 2018 - 14
Efficient Plant January 2018 - 15
Efficient Plant January 2018 - 16
Efficient Plant January 2018 - 17
Efficient Plant January 2018 - 18
Efficient Plant January 2018 - 19
Efficient Plant January 2018 - 20
Efficient Plant January 2018 - 21
Efficient Plant January 2018 - 22
Efficient Plant January 2018 - 23
Efficient Plant January 2018 - 24
Efficient Plant January 2018 - 25
Efficient Plant January 2018 - 26
Efficient Plant January 2018 - 27
Efficient Plant January 2018 - 28
Efficient Plant January 2018 - 29
Efficient Plant January 2018 - 30
Efficient Plant January 2018 - 31
Efficient Plant January 2018 - 32
Efficient Plant January 2018 - 33
Efficient Plant January 2018 - 34
Efficient Plant January 2018 - 35
Efficient Plant January 2018 - 36
Efficient Plant January 2018 - 37
Efficient Plant January 2018 - 38
Efficient Plant January 2018 - 39
Efficient Plant January 2018 - 40
Efficient Plant January 2018 - 41
Efficient Plant January 2018 - 42
Efficient Plant January 2018 - 43
Efficient Plant January 2018 - 44
Efficient Plant January 2018 - 45
Efficient Plant January 2018 - 46
Efficient Plant January 2018 - 47
Efficient Plant January 2018 - 48
Efficient Plant January 2018 - Cover3
Efficient Plant January 2018 - Cover4
https://www.nxtbook.com/atp/MaintenanceTechnology/epjulyaug2020
https://www.nxtbook.com/atp/MaintenanceTechnology/epjune2020
https://www.nxtbook.com/atp/MaintenanceTechnology/epmay2020
https://www.nxtbook.com/atp/MaintenanceTechnology/epapril2020
https://www.nxtbook.com/atp/MaintenanceTechnology/epmarch2020
https://www.nxtbook.com/atp/MaintenanceTechnology/epfeb2020
https://www.nxtbook.com/atp/MaintenanceTechnology/epjan2019
https://www.nxtbook.com/atp/MaintenanceTechnology/epnovdec2019
https://www.nxtbook.com/atp/MaintenanceTechnology/epseptoct2019
https://www.nxtbook.com/atp/MaintenanceTechnology/epmay2019
https://www.nxtbook.com/atp/MaintenanceTechnology/epapril2019
https://www.nxtbook.com/atp/MaintenanceTechnology/epmarch2019
https://www.nxtbook.com/atp/MaintenanceTechnology/epfebruary2019
https://www.nxtbook.com/atp/MaintenanceTechnology/epjanuary2019
https://www.nxtbook.com/atp/MaintenanceTechnology/epdecember2018
https://www.nxtbook.com/atp/MaintenanceTechnology/epnovember2018
https://www.nxtbook.com/atp/MaintenanceTechnology/epoctober2018
https://www.nxtbook.com/atp/MaintenanceTechnology/epseptember2019
https://www.nxtbook.com/atp/MaintenanceTechnology/epaugust2018
https://www.nxtbook.com/atp/MaintenanceTechnology/0818schneider
https://www.nxtbook.com/atp/MaintenanceTechnology/epjuly2018
https://www.nxtbook.com/atp/MaintenanceTechnology/epjune2018
https://www.nxtbook.com/atp/MaintenanceTechnology/epmay2018
https://www.nxtbook.com/atp/MaintenanceTechnology/epapril2018
https://www.nxtbook.com/atp/MaintenanceTechnology/epmarch2018
https://www.nxtbook.com/atp/MaintenanceTechnology/epfebruary2018
https://www.nxtbook.com/atp/MaintenanceTechnology/epjanuary2018
https://www.nxtbook.com/atp/MaintenanceTechnology/epdecember2017
https://www.nxtbook.com/atp/MaintenanceTechnology/epnovember2017
https://www.nxtbook.com/atp/MaintenanceTechnology/epoctober2017
https://www.nxtbook.com/atp/MaintenanceTechnology/mtsept2017
https://www.nxtbook.com/atp/MaintenanceTechnology/mtaugust2017
https://www.nxtbook.com/atp/MaintenanceTechnology/mtjuly2017
https://www.nxtbook.com/atp/MaintenanceTechnology/mtjune2017
https://www.nxtbook.com/atp/MaintenanceTechnology/mtmay2017
https://www.nxtbook.com/atp/MaintenanceTechnology/mtapril2017
https://www.nxtbook.com/atp/MaintenanceTechnology/mtmarch2017
https://www.nxtbook.com/atp/MaintenanceTechnology/mtfebruary2017
https://www.nxtbook.com/atp/MaintenanceTechnology/mtjanuary2017
https://www.nxtbook.com/atp/MaintenanceTechnology/mtdecember2016
https://www.nxtbook.com/atp/MaintenanceTechnology/mtnovember2016
https://www.nxtbook.com/atp/MaintenanceTechnology/mtoctober2016
https://www.nxtbook.com/atp/MaintenanceTechnology/mtseptember2016
https://www.nxtbook.com/atp/MaintenanceTechnology/mtaugust2016
https://www.nxtbook.com/atp/MaintenanceTechnology/mtjuly2016
https://www.nxtbook.com/atp/MaintenanceTechnology/mtjune2016
https://www.nxtbook.com/atp/MaintenanceTechnology/mtmay2016
https://www.nxtbook.com/atp/MaintenanceTechnology/mtapril2016
https://www.nxtbook.com/atp/MaintenanceTechnology/mtmarch2016
https://www.nxtbook.com/atp/MaintenanceTechnology/mtfebruary2016
https://www.nxtbook.com/atp/MaintenanceTechnology/mtjanuary2016
https://www.nxtbook.com/atp/MaintenanceTechnology/mtdecember2015
https://www.nxtbook.com/atp/MaintenanceTechnology/mtnovember2015
https://www.nxtbook.com/atp/MaintenanceTechnology/mtoctober2015
https://www.nxtbook.com/atp/MaintenanceTechnology/mtseptember2015
https://www.nxtbook.com/atp/MaintenanceTechnology/MTAugust2015
https://www.nxtbook.com/atp/MaintenanceTechnology/MTJuly2015
https://www.nxtbook.com/atp/MaintenanceTechnology/MTJune2015
https://www.nxtbook.com/atp/MaintenanceTechnology/M
https://www.nxtbook.com/atp/MaintenanceTechnology/0415endress
https://www.nxtbook.com/atp/MaintenanceTechnology/MTApril2015
https://www.nxtbook.com/atp/MaintenanceTechnology/MTMarch2015
https://www.nxtbook.com/atp/MaintenanceTechnology/MTFebruary2015
https://www.nxtbook.com/atp/MaintenanceTechnology/MTJanuary2015
https://www.nxtbook.com/atp/MaintenanceTechnology/MTDecember2014
https://www.nxtbook.com/atp/MaintenanceTechnology/MTNovember2014
https://www.nxtbook.com/atp/MaintenanceTechnology/MTOctober2014
https://www.nxtbook.com/atp/MaintenanceTechnology/MTSeptember2014
https://www.nxtbook.com/atp/MaintenanceTechnology/MTAugust2014
https://www.nxtbook.com/atp/MaintenanceTechnology/MTJuly2014
https://www.nxtbookmedia.com