Siemens SIMATIC S7-1500 System Manual page 40

Responsibility in the digital supply chain
Cybersecurity should play a critical role in the evaluation and procurement process. The entire
life cycle of a product should be considered to ensure protection against current and future
risks. These include, for example, security updates throughout the product life cycle,
including guidelines for secure disposal of the product.
Siemens plans and announces the provision of security updates, total discontinuation of
products and cancellation of product support.
Employee awareness
Regular training in cybersecurity and continuous testing of training success are essential so
that cybersecurity measures are internalized in processes and work instructions. This involves
general training in the use of software and IT hardware for company communication and as
work equipment, e.g.:
• secure handling of USB devices
• encrypted communication
• use of VPN
• rules for passwords and use of access
• setting up two-factor authentication
• Educating employees about the dangers posed by malware, phishing, social engineering
and other factors
Furthermore, if applicable, production equipment and software training should always
include the topic of cybersecurity.
Maintaining the security concept through updates
Keeping software up-to-date is essential, for example, to benefit from the following
measures:
• Implementation of new security strategies, protocols and techniques
• Closing of security vulnerabilities
• Elimination of security vulnerabilities
To this end, it is necessary to keep a constant eye on the further development of protective
measures and, if necessary, the expansion of requirements.
It is recommended to:
• Set up notifications for (security) updates
• Subscribe to information on vulnerabilities
• Monitor and implement the further development of the technology, especially in the area
of cybersecurity
In short: Always keep technology and knowledge up to date.
S7-1500R/H redundant system
System Manual, 01/2024, A5E41814787-AF
4.4 Integrated security concept and security strategies
Industrial cybersecurity
39