Siemens 9810 Series User Manual page 24

Cybersecurity
Recommended action
Create and change user
passwords
Set up Advanced security
Disable unused protocols
and change default port
numbers
Revenue-lock the meter
and use
sealing points
Validate security settings
Assign a dedicated reader
for event log notifications
Configure syslog to store
event logs
Operate
Monitor the event log
Maintain
Apply firmware updates
Check the revenue lock
and anti-tamper seals
24
Defense-in-depth role
Create strong passwords for each user that requires access to the
meter. Default account settings and weak passwords are often the
source of unauthorized access by malicious users.
*
Follow user account management tasks as described by your
organization or contact your network administrator. For example,
maximum password age or history policies.
Advanced security is the default meter security mode. If your
* meter uses standard security mode, we recommend you change it
to advanced.
Disable unnecessary and unused communication protocol ports,
such as SFTP and network ports, to reduce the meter attack
surface.
Change port number default values to reduce the predictability of
port use.
See "Protocols, ports, and connections" on page
Physical lock switch with tamper-evident seal to prevent remote
anti-tamper
modification of revenue parameters, settings, and data.
Verify the meter security configuration.
Assigning a dedicated reader can help prevent event log entries
being overwritten before they are reviewed.
A syslog server can receive logs from multiple devices and store
the log information as needed. Syslog helps maintain meter log
information for extended periods of time.
See "Syslog" on page
Monitor event logs for suspicious activity and to help identify the
cause of cybersecurity breaches that could lead to a cybersecurity
incident.
Report a vulnerability to Siemens.
Keeping your device firmware up to date helps protect you from
security vulnerabilities.
Follow your company's policies and standards by periodically
checking your device locks and seals to verify that the device has
not been tampered with.
9410 series - User manual
215.
65.
7EN05-0336-09