Security Management For Hmi Devices; Data Protection - Siemens SIMATIC HMI Series Operating Instructions Manual

Safety instructions

2.2 Security management for HMI devices

Siemens' products and solutions undergo continuous development to make them more
secure. Siemens strongly recommends that product updates are applied as soon as they are
available and that the latest product versions are used. Use of product versions that are no
longer supported, and failure to apply latest updates may increase customer's exposure to
cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS
Feed under (http://www.siemens.com/industrialsecurity).
Disclaimer for third-party software updates
This product includes third-party software. Siemens AG only provides a warranty for
updates/patches of the third-party software, if these have been distributed as part of a
Siemens software update service contract or officially released by Siemens AG. Otherwise,
updates/patches are undertaken at your own risk. You can find more information about our
Software Update Service offer on the Internet at Software Update Service
(http://www.automation.siemens.com/mcms/automation-software/en/software-update-
service).
Notes on protecting administrator accounts
A user with administrator privileges has extensive access and manipulation options in the
system.
Therefore, ensure there are adequate safeguards for protecting the administrator accounts
to prevent unauthorized changes. To do this, use secure passwords and a standard user
account for normal operation. Other measures, such as the use of security policies, should
be applied as needed.
See also
Technical support (https://support.industry.siemens.com/cs/ww/en/)
2.2 Security management for HMI devices
You can find additional information on security management of HMI devices on the Internet
at the following address:
Panel Security Guidelines (https://support.industry.siemens.com/cs/de/en/view/109481300)
2.3

Data protection

Siemens observes the data protection guidelines, especially the requirements regarding data
minimization (privacy by design). This means the following for this SIMATIC product: The
product does not process / save any personal information, but only technical functional data
(e.g. time stamps). If the user links this data to other data (e.g. shift plans) or if the user
saves personal information on the same medium (e.g. hard disk) and therefore creates a
personal reference in the process, the user has to ensure meeting the guidelines regarding
data protection.
36
Mobile Panels 2nd Generation
Operating Instructions, 09/2018, A5E33876626-AC