Cybersecurity; Recommended Actions - Siemens US2:9810T24V User Manual

Cybersecurity

Cybersecurity
Your device has security capabilities that:
• Allow it to be part of a NERC CIP compliant facility. For information on NERC Reliability
Standards, go to the
• Align with cybersecurity standards in the IEC 62443 international standard for business IT
systems and Industrial Automation and Control Systems (IACS) products. For information
about the IEC 62443 international standard, go to the
Commission
This chapter contains information about your product's cybersecurity. Network administrators,
system integrators, and personnel that commission, operate, maintain, or decommission a device
should review
environment.
POTENTIAL COMPROMISE OF SYSTEM AVAILABILITY, INTEGRITY, AND
CONFIDENTIALITY
Failure to follow these instructions can result in death or serious injury or equipment
damage.
• Change default passwords/passcodes to help prevent unauthorized access to device
settings and information.
• Disable unused ports/services and default accounts, where possible, to minimize pathways
for malicious attacks.
• Place networked devices behind multiple layers of cyber defenses (such as firewalls, network
segmentation, and network intrusion detection and protection).
• Use cybersecurity best practices (for example: least privilege, separation of duties) to help
prevent unauthorized exposure, loss, modification of data and logs, interruption of services,
or unintended operation.

Recommended actions

Your device is designed to be used in a protected environment that uses a defense in depth
strategy, in compliance with IEC 62443, the global standard for industrial automation control
system security.
To help secure your device, you must take specific actions at every stage of the project life-cycle.
NOTE: The list of recommended actions below is not a complete list of possible cybersecurity
measures. It is meant to be a starting point to improve the security of your device in a protected
environment. Consult with cybersecurity experts to plan, configure, operate, maintain, and
decommission your device based on your needs.
23
North American Electric Reliability Corporation
website.
"Recommended actions" on page 23
International Electrotechnical
to help secure your device in a protected
WARNING
9810 series - User manual
website.
7EN05-0390-08