Objectives Of Industrial Cybersecurity; Integrated Security Concept And Security Strategies; Holistic "Defense In Depth" Security Concept - Siemens SIMATIC S7-1500 System Manual

Industrial cybersecurity

4.4 Integrated security concept and security strategies

4.3.2

Objectives of industrial cybersecurity

The objectives of industrial cybersecurity are:
• Trouble-free operation and ensuring the availability of industrial plants and production
processes
• Prevention of risks to people and production from cybersecurity attacks
• Protection of industrial communication against espionage and manipulation
• Protection of industrial automation systems and components against unauthorized access
and data loss
• Provision of a practical and cost-effective concept for securing existing plants and devices
without their own security functions
• Use of existing, open, and proven industrial security standards
• Compliance with legal requirements
An optimized and adapted security concept applies to automation and drive technology. The
security measures must not impede or endanger production.
4.4 Integrated security concept and security strategies
4.4.1

Holistic "Defense in Depth" security concept

With Defense in Depth, Siemens provides a multi-layer security concept that offers industrial
plants comprehensive and far-reaching protection in accordance with the recommendations
of the IEC 62443 international standard.
Productivity and know-how are protected on 3 levels:
Plant security
Plant security uses various methods to secure the physical access of people to critical
components. This starts with classic building access and extends to securing sensitive areas
using access control (for example, code card, iris scan, fingerprint or access code).
Network security
Automation networks must be protected against unauthorized access. This is achieved
through security measures on the product, but also those in the product-related
environment.
System integrity
Targeted measures must be taken to protect existing know-how or to prevent unauthorized
access to automation processes.
26
SIMATIC Drive Controller
System Manual, 11/2023, A5E46600094-AD