The products, systems and solutions offered provide the key security features and settings to create and continuously maintain an overall cyber-secure solution.

The manufacturer used offers vulnerability management (including patches and updates) as well as a designated cybersecurity officer, who is available as a contact person for questions about the products, systems and solutions provided.

The manufacturer's products have been developed and produced in accordance with the IEC 62443-4-1 and IEC 62443-4-2 standards.

The system / solution is to be created on the basis of a defense in depth concept (according to IEC TS 63208).

Security and setting features of the products and systems:

Protection devices:

The devices provide essential functions to establish and ensure system integrity. These include:

• Signed firmware
• Write protection
• Protection against unauthorized operation of the input options on the device (e.g. HMI, ETU, etc.)
• Option of deactivating unnecessary functions (e.g. Bluetooth)
• Interlocking and locking options
• Modbus TCP allowlist

Measuring devices:

• Signed firmware
• Modbus TCP allowlist
• Protection against unauthorized operation of the input options on the device
• Option of deactivating unnecessary functions (e.g. web server)

Gateways:

• Signed firmware
• Option of deactivating unnecessary functions (e.g. web server)
• Encrypted data communication to higher-level systems (e.g. cloud applications)
• Role-based access
• IP firewall

Cloud applications:

• Identity management and access control
• Encrypted data transmission
• Encrypted internal communication and data storage
• Backup and recovery
• Checks and monitoring in the production and operating phases

Manufacturer requirements:

The manufacturers of the system components meet the following cybersecurity requirements:

• Direct contact persons for cybersecurity issues as well as dedicated PSS (product and system security) organization
• Vulnerability management including security-related recommendations regarding risk mitigation for affected components, systems and solutions
• Security as part of the product development process and the entire product lifecycle in accordance with IEC 62443-4-1
• Security in the production process based on IEC 62443-4-2