Category: ABB

Do something rather than nothing.

Investing in cyber security is necessary to protectyour company’s future.  Companies that fail to ad

dress known risks are viewed poorly when cyber attacks expose lack of proper management.

Cyber security is not a onetime event, but an on going process.  To guide you on this journey, we of

fer a stepwise and practical service approach that lowers cyber risk by taking the necessary steps to

identify what must addressed, actively protect automation assets, detect security breaches, re

spond to cyberattacks and establish backup and recovery plans.

Detect and respond: Once you’ve implemented your cyber security foundation, depending on risk

factors and regulations, you may need to strengthen your cyber defenses with ABB ad

vanced cyber security services such as network and event monitoring.

ABB can help monitor your defenses on a 24×7 model to quickly alert you of any threat to your

production. When an abnormal event or malicious behavior is detected and alerted, ABB experts an

alyze the event and respond as needed.

In the event of a cyber security breach, ABBs experts spring into action and restore your produc

tion as quickly as possible. Afterwards, ABB provides an afteraction report and consults with

strategy to prevent future incidents.

An overview of the security features provided

with Symphony Plus:

• Detailed system monitoring and diagnostics

• Network protection with IPSec

• Host firewalls for servers and workstations

• Network loop protection in servers andworkstations

• Robustness tested products

• Network protection filters and storm protection for controllers and communication modules

• Detailed rolebased access control

• Fast operator log over

• HWbased access control for safety systems

• Digital signature to ensure data is kept unchanged after approval

• Advanced access control for secure interaction and inactivity logout

• Audit trail for logging of all userinitiated actions in a system

Overview of optional security features through our partners:

• Malware protection: Antivirus accomplished with McAfee End point Security on all Symphony

Plus servers and workplaces

• Malware protection: Allowlisting accomplished with McAfee Application Control.

• Backup and restore for disaster recovery

Symphony Plus gives you peace of mind

Peace of mind tends to come when you have less to worry about. And that is a fact when you oper

ate Symphony Plus. It is reassuring to know you have done all you can to protect your company’s

knowhow, ideas and operations.

ABB is engaged with the wider ICSCybersecurity community which includes security researchers

and analysts. There is an open channel of communication with the community and customer base

regarding cyber security issues. This may entail working with third parties specialized in security

assessment and penetration testing of ICS technologies. When a potential vulnerability is identi

fied or reported, ABB immediately initiates our vulnerability handling process. The goal is to pro

vide customers with advise for workarounds or mitigation strategies that minimize the potential

risk of a vulnerability as much as possible. These findings are then addressed by product develop

ment and made available to improve overall prod uct cyber security.

Occasionally these activities result in the need to publish an external Cybersecurity Advisory which

demonstrates part of ABB’s commitment to the user community in support of this critical topic.

Responsible disclosure is an important element in the chain of trust we work to maintain with our

many customers. The release of an Advisory provides timely information which is essential to help

ensure our customers are fully informed. Cybersecurity Advisories which are released can be

found on our public facing website here.

Secure by Default

The goal in this phase is to create default product installations and configurations that are more

resistant to attack, by reducing the attack surface (the number of points a hacker can attempt to

exploit). To accomplish this goal, software must be installed in its most secure configuration and

must stay that way until the customer takes informed steps to loosen it.

Symphony Plus is installed in a predefined way, which makes the process easy and reliable,

ensuring that settings are done in a consistent and repeatable way. Functions and features that

are not needed are disabled or not installed, and Windows Firewall is configured to only enable

necessary communication ports. Symphony Plus gives control engineers a unique opportunity to

manage access for each user. Access can be granted based on parameters such as who and

where the user is, what the user wants to do, and on which aspect object.

Secure by Deployment

The goal here is to ensure that the products can be installed, configured, operated and maintained

in a secure way. User documentation describes how to install and operate Symphony Plus

at the highest level of security. Documentation includes recommendations on how to build secure system

architecture using security zones and defense in depth. Security compliance project checklists

make sure that all important steps are taken during project execution to ensure a secure

deployment. Systems in operation are kept secure with monthly security patch updates and daily

anti virus updates.

Secure by Design

The goal here is to make sure that security bugs or vulnerabilities are not present in new software.

To accomplish this, cyber security must be a factor from the very start of product design. And through

all phases, from creating the specification, through writing the code, and testing the product.

A securebydesign philosophy manifests itself as security training, code reviews and walkthroughs,

threat analysis, and robustness testing of products.Security is integrated in ABB’s quality management

system. Formal threat analysis and threat modelling provide the basis for security

requirements and design principles for the system.

Security checkpoints at project gates ensure that security objectives are met.

One key element of this process is our independent robustness test lab, the ABB Device

Security Assurance Center, where our products are tested. This laboratory is run by dedicated

personnel who are not part of any product development team. They use several specialized

security testing tools, for example Achilles Test Platform and Nessus scanners.

In addition to our adoption of SD3+C Security Framework and extensive internal testing

performed by ABB’s Device Security Assurance Center (DSAC), ABB has embraced third party

security certification to IEC62443 standard by ISA Secure Certification Institute (ISCI),

Symphony Plus security features are designed to meet regulatory requirements and includes

features to help enable compliance such as user account management, rolebased access control,

user authentication, audit trail, etc.

Cyber security is embedded

in Symphony Plus

Cyber security is embedded in all phases of ABB’s system life cycle. Security for Symphony Plus

adheres to the SD3+C Security Framework (created by Microsoft) to en sure and improve security in

system components. This means that cyber security is addressed at each stage of our system

life cycle, from design and development to maintenance.

Secure by Deployment

The goal here is to ensure that the products can be installed, configured, operated and maintained

in a secure way. User documentation describes how to install and operate Symphony Plus

at the highest level of security. Documentation includes recommendations on how to build secure system

architecture using security zones and defense in depth. Security compliance project checklists

make sure that all important steps are taken during project execution to ensure a secure

deployment. Systems in operation are kept secure with monthly security patch updates and daily

anti virus updates.

ABB’s systematic approach ensures cyber security

The global industries have steadily increased their focus on cyber security for industrial automation

and control systems. As a result,many different drivers and trends have emerged.

At ABB, we have always seen cyber security as a key requirement and are committed to provide

products, systems and services that clearly address this vital issue. On a global level, ABB

takes a systematic approach to cyber security throughout design, development and delivery of

its automation products. For instance, ABB has established an orga  nization with security

councils on corporate and division level to keep track of the global needs and requirements

concerning cyber security.

Optimal compliance

We also do our part when it comes to cyber se curity standards. ABB is an active member and driver of

industry initiatives, including active involvement in ISA, IEEE, Cyber Security Standard Committees and

IEC. Our involvement also allows the security councils to ensure that ABB products and systems

are compliant with, and support industry standards and regulations related to cyber

security. We are constantly adapting to the latest threats and testing with best inclass tools to

ensure products can meet today’s cyber security requirements.

Symphony Plus has been designed with cyber security in mind and provides stateoftheart

functionality. This allows you to easily address requirements such as NERCCIP and maintain

compliance according to these standards and beyond.

Why control system owners

have to focus on cyber security

Industrial automation and control systems have evolved over the past decade thanks to techno

logical advancements. At the heart of these advancements are specialized IT systems.

To provide end users with comprehensive real time information and allow for higher levels of

reliability and control, these systems have become more and more interconnected.

The new generation of automation systems utilize open standards, such as OPC, IEC 61850. IEC 60870

5104. DNP 3.0. and commercial technologies, in particular Ethernet and TCP/IPbased

communication protocols. They also enable connectivity to external networks, such as office

intranet and the internet. These changes in technology have brought huge benefits from anopera

tional perspective, but they have also introduced cyber security concerns previously

known only in office or enterprise IT systems.

Cyber risks were inherited by adopting open IT standards. But fortunately, so were the cyber

security mechanisms developed in enterprise environments to address those risks.

These mechanisms enable the development of cyber security solutions tailored for industrial

automation and control systems, relying on proven technology.

ABB is committed to cyber security

Cyber security is important for every company.Without it, your company

risks production disruptions, loss of intellectual property and data

that cannot be recreated.

As for any ABB solution, we want you to be confident knowing that we are protecting you

with bestinclass security solutions.

We fully understand the importance of cyber security, and its responsibility to advance the

security of control systems. You can rely on system solutions where reliability and security

have the highest priority.

ABB helps secure your company’s future

The world of process automation is changing in the face of new technologies, opportunities and

challenges. ABB remains committed to helping customers take advantage of technology advances

while minimizing exposure to cyber risks.

Since ABB is a leading provider of control systems for a wide spectrum of industries,

we can combine our technology strengths and domain expertise to provide a

customerfocused solution that enhances asset productivity and efficiency.

The objective is to establish the necessary levels of cyber security,

and maintain that level while preserving the availability and functional inter

operability of systems.

If its valuable to you, it is a target to someone else

In critical infrastructure the protection goes beyond intellectual property

and covers the availability of the asset that could be diminished under

an attack. In fact, the shape and size of your company’s future will be

determined by your know-how, ideas and operations – but also on your

ability to protect them.

With so much at stake the big question is: How do you secure your

company against cyber risks, like attacks from viruses, hackers,

ransomware and human errors?

ABB is committed to cyber security

Cyber security is important for every company.Without it, your company

risks production disruptions, loss of intellectual property and data

that cannot be recreated.

As for any ABB solution, we want you to be confident knowing that we are protecting you

with bestinclass security solutions.

We fully understand the importance of cyber security, and its responsibility to advance the

security of control systems. You can rely on system solutions where reliability and security

have the highest priority.