Security Measures In Automation And Drive Technology - Siemens SINAMICS Configuration Manual

Industrial Security
3.3 Why is Industrial Security so important?
3.3.1

Security measures in automation and drive technology

Siemens automation and drive technology concerns itself with security aspects at the following
levels:
● Application security
Refers to products and functions that take into consideration the needs of Industrial Security
in the field of automation. This involves particular consideration of the application and task
at hand, as well as the people performing the actions in an automated plant. This allows
industrial security to be easily implemented in production processes.
● Security support
Support from specialists with network and special industry know-how in the analysis,
planning, implementation, testing, and optimizing of Industrial Security. These services lead
to the highest possible level of industrial security and operating capacity of the production
plant.
Siemens offers comprehensive customer support based on the "Implement Security"
service: With this service you can implement protective measures to increase the security
level of plants and production facilities. You can find more information about the entire
"Implement Security" portfolio on the Internet
global/en/portfolio/plant-data-services/industrial_security/Pages/plant-security-
services.aspx).
Security measures
With increasing digitalization, comprehensive security in the automation system is becoming
ever more important. For this reason, industrial security is a core element of every product that
can be networked.
As manufacturer of automation and drive products, Siemens supports secure operation for its
customers by integrating security into its products.
● Product Lifecycle Management (PLM) process
All of the measures involving automation and drive technology are stored in the PLM
process. The PLM is certified by the German Technical Inspectorate based on
IEC 62443-4-1.
● Threat and Risk Analyses (TRAs)
Analytically potential attack threats are detected and evaluated using TRAs. Identified
critical threats are implemented in the product as necessary basic functions, based on the
motto "Security by Design".
● Code analyses
Siemens regularly performs code analyses in order to identify and correct possible errors
at an early stage during the formal check.
14
(https://www.industry.siemens.com/services/
Configuration Manual, 08/2017, A5E36912609A
Industrial Security