SCADA Security

The existence of SCADA based systems are increasingly seen as vulnerable to cyberwarfare/cyberterrorism attacks. Cyber attacks could cause massive financial losses through system downtime, theft or misuse of data, and even loss of life.

Our experience in the manufacturing industry gives us the neccessary skill to secure SCADA (Supervisory Control and Data Acquisition) Systems, DCS (Distributed Control Systems), Process Control Systems, and high-availability environments. There are a number of new product categories Plant IT Managers should be aware such as SCADA firewalls, serial encryptors, cellular data security solutions, proximity cards for strong operator authentication, SCADA security assessment tools.

CIM Software can provide:

Perimeter Defense
Security Policies and Procedures
Security Appliances- Firewalls, Routers, Switches, VPN's
Domain Security - Novell, Active Directory
Operating System Security - Servers and Workstations
Plant Floor Security - PLC's, RTU's

For more information on SCADA Security, visit these sites below.

ISA-SP99, Manufacturing and Control Systems Security Commitee
The committee addresses manufacturing and control system security issues. Manufacturing and control systems electronic security encompassing all types of plants, facilities, and systems in all industries.

Process Control Security Requirements Forum, PCSRF
The National Institute of Standards and Technology, NIST, initiative on Critical Infrastructure Protection, CIP, develops and disseminates standards for process control and SCADA security. PCSRF is a working group of over 700 members including vendors, system integrators, and end users of industrial control systems.

North American Electric Reliability Council, NERC
Their committee on Cyber Security is issuing mandatory cyber security requirements to reduce risks to the reliability of the bulk electric systems, electrical generation resources, from any compromise of critical cyber assets, computers, software and communication networks, that support those systems.

The Chemical Cyber Security Program
This is a sector-wide program focused on cyber security risk management and reduction to help protect communities and facilitate business operations. They have a team focusing on control systems: Manufacturing and Control Systems Security Team.