Hydrocarbon Processing - February 2022 - 11

Business Trends
tiple copies. When something happens,
you can go back and look at that data to
determine the exact conditions when it
occurred. When it comes time to restore a
process, a person in the OT organization
will decide what data set is the best one to
use for recovery.
The priority in a production process
is to restore the process. You have all that
data. You use it to determine a recoverable
state, wipe out everything and then
restore back to where you were before the
incident. You isolate data collected after
that point, so you do not reinfect yourself.
Then, you can set about disentangling
what happened. Restore the process
before investigating.
It comes down to having two capabilities
that become the core of your ability
to respond to an attack: the team with
all the IT, OT and process optimization
knowledge and skills organized in a way
that the team can quickly jump in together
to respond to a problem; and the tools
that continuously back up system data in
a way that lets you go back to a good recoverable
state. The tools and the people
are focused on the same goal: meeting the
business objective of restoring production
processes as soon as possible.
RECOVERY DEPENDS ON
HOLISTIC UNDERSTANDING
OF THE OT ENVIRONMENT
M. Chevis, Guffman Ventures
When talking about modern OT control
systems and connected OT environments,
successfully responding to targeted
attacks requires two fundamental things:
1. Understanding the difference
between IT and OT incident
response. You have to recognize
that end-to-end incident
management and remediation in
an OT environment is different
than in an IT environment
that suffers a malware attack,
information theft or unavailability
of business systems. You cannot
just shut down an OT-managed
process without regard for
production and safety impact.
Restoring basic production
capability requires actions tailored
to an OT environment rather than
an enterprise IT environment.
2. A good response plan. You must
make sure you have a predefined
way to respond to cyber incidents
that affect OT systems. Most
corporations have an incident
response process, but this is not
like the IT world where you can
back up and easily restore IT
systems. OT is different. You must
have procedures that you trust
to re-create the environment in
a state of known integrity so that
you can restart your process and
your equipment safely.
Tools and capabilities on the IT side
can help prevent attacks or minimize the
outcomes of an incident that can affect
OT systems. You can adapt some of those
tools to monitor and analyze OT network
traffic to detect potential threats. There
are new technologies designed specifically
to passively monitor normal OT traffic
and send alerts when abnormal communication
patterns are detected. One chal1.77''
4.5cm
Pin
0.83''
2.1cm
0.94''
2.4cm
0.83''
2.1cm
Duplex
2205
Pop-A-Plug P2
Scheduled Maintenance
Leaking Tubes
Perfect Solution for Leaking Heat Exchanger Tubes!
Trusted by process plants around the world, Pop-A-Plug Tube Plugs from Curtiss-Wright are engineered for optimal performance throughout the
life cycle of the heat exchanger. Controlled hydraulic installation eliminates welding and time-consuming pre-/post-weld heat treatments that
can cause damage to tubes, tube sheet ligaments, and joints. Pop-A-Plug Tube Plugs are manufactured with ASME/ASTM certified materials.
* Pressure rating 7000 PsiG (483 BarG)
* Helium leak tight seal to 1 x 10-10
cc/sec
* Wide range of sizes /materials to accommodate any application
* 100% lot tested to ensure unmatched quality
877.328.2107
2022_HP_PAP_PRINT.indd 1
Local Stock Available in Houston - 24/7 Emergency Manufacturing
l
est-sales@curtisswright.com
l cw-estgroup.com/hp
Hydrocarbon Processing | FEBRUARY 2022 11
1/10/2022 12:47:03 PM

https://analytics.clickdimensions.com/cw-estgroupcom-aud48/pages/d3809081f3a0ea11a836000d3a5df6cc.html http://www.cw-estgroup.com/hp

Hydrocarbon Processing - February 2022

Table of Contents for the Digital Edition of Hydrocarbon Processing - February 2022