Network Security; The Industrial Security Concept Of Siemens - Siemens SIMATIC NET System Manual

Network structures and network configuration

2.4 Network security

2.4 Network security
2.4.1

The Industrial Security concept of Siemens

Achieving information security as a complex task
Using the advantages that come along with digitalization has become indispensable for
industrial companies. Trends such as cloud-based technologies or the increased usage of
Ethernet-based protocols down to the field level offer significant competitive advantages, but
also the risk of being subject to cyber attacks. Industrial plants must therefore be thoroughly
protected on different levels by means of suitable measures.
IEC 62443
The standard series IEC 62443 ("Industrial communication networks - IT security for
networks and systems") is the decisive standard for IT security in the industry and addresses
all stakeholders in the life cycle of an automation environment in the various sections.
Requirements placed on plant operators or system integrators are also a part of this
standards series as well as specific component requirements or principles in the
development of automation products ("Security by Design"). The IEC 62443 defines four
maturity levels as well as four security levels, from SL-1 (accidental manipulation) to SL-4
(manipulation with specific knowledge and extensive personal and material resources).
98
System Manual, 09/2019, C79000-G8976-C242-10
Industrial Ethernet