Plant Security Lifecycle Services

Plant Security Lifecycle Services are a cyber security lifecycle approach to help customers reduce security risks and manage plant security throughout its life.

Challenges for Customers

Security is fundamental for the IIoT.

As IT technology expands into the field of industrial control systems, the security risk increases with new internal and external threats to plant assets (i.e. sensors, motors and other control devices) connected to the network. Yokogawa considers that both IT and OT have converged in today's industrial control system environments and there is an even greater need for a common understanding between all those who support or rely on these systems.
Hence, Yokogawa provides vendor-independent solutions to address the various issues faced by your plant.

Challenges for Customers on Plant Security Lifecycle Services

Our Solutions

Yokogawa has two types of solutions to protect your system.

Yokogawa has host based security which focuses on protecting the “end-points” (workstations and servers) from malicious or accidental actions. The Endpoint Security Service provides a fundamental security service as a first step to protecting your control system against malware infection and cyber-attacks.
For the next step, how to keep secure and manage the network and all endpoints? The Integrated Security Service provides various security solutions from endpoints to the network boundary in your plant to solve the major challenges.

Customer Benefits

The Yokogawa Security Solution Portfolio is a comprehensive security suite of indispensable solutions for the sustainability and efficiency of your control system.

Increases plant safety & security
Increases the availability, integrity and confidentiality of the control system
Detects and records unwanted activity and modifications to applications
Controls access to the network, and detects unwanted access or activity
Protects viewing, editing, and use of specific pieces of control system content
Controls who, what, where, and when access is allowed to which applications or devices

Customer Benefits on Plant Security Lifecycle Services

Enabling Technology

What kind of technology can protect my plant?

Protecting industrial assets requires a “defense-in-depth” security approach that addresses internal and external security threats. This approach utilizes multiple layers of defense (physical and electronic) at separate industrial levels by applying policies and procedures that address different types of threats. For example, multiple layers of network security protect networked assets, data, and end points, while multiple layers of physical security protect high-value assets. No single technology, product, or methodology can fully secure industrial networks.

The 1st step toward protecting your control system against malware infection and cyber-attack is to incorporate the Endpoint Security Service.

The threat of cyber-attack through unauthorized access or malware infection that targets vulnerable control systems via USB storage devices is increasing on a daily basis. By incorporating the “Endpoint” services on your Windows PCs or Servers, it will protect against such threats and mitigate any risks. Yokogawa Endpoint Security Service will mitigate security risks at the users “Endpoint” and will help to support the sustainability and health of the control system throughout your plant’s lifecycle.

Take a step from different perspective

To assume that everything will “probably be OK” may not be adequate as the risk to security increases every day. In order to evaluate the potential security risk objectively we encourage you to adopt the Security Risk Communication with Yokogawa and determine the best solution to fit your needs.

Security Risk Communication

Based on the results of the simple security survey provided by the customer, Yokogawa evaluates the security risk. Upon discussion with the customer, Yokogawa proposes the optimum security countermeasures.

Virus Check Service

Yokogawa Virus Check Service can detect computer viruses without the need for installing antivirus software. By periodically running this virus check, the security of your system can be maintained.

Adopt effective security services

The customer’s biggest concern is the risk of a computer malware infection and would like the reassurance that their system is safe. Yokogawa provides an effective security service in response to the customer’s requests and operational conditions.

AV/OS* Implementation Service

For the prevention of malware such as computer viruses, Yokogawa recommends the installation of antivirus software as well as the Microsoft Security Updates that has been approved by Yokogawa. AV/OS : Antivirus software/ Microsoft Security Updates

Malware Inactivated Service

A permitted program list is created and executed on the customer’s HIS-PC protect against infectious malware by restricting the execution of specific software.

USB Port Lock Service

This service can restrict the use of USB storage device, both physically and theoretically to protect against malware infections.

Software Backup Service

This service is not only used to minimize customer down time during HIS trouble occurrences but also to security data integrity. Yokogawa uses external hard drives to back up the hard drives of the HIS to ensure continuity and reliability of the data backup.

Avoid deteriorated security level

A periodical check and an update is indispensable to maintain or manage security levels, since security levels can deteriorate as time passes.

AV/OS Update Service

This service can periodically update pattern files of antivirus software and Microsoft Security Updates.

Security Effectiveness Service

This service can check implemented security measures during a periodical inspection or shutdown maintenance.

Security Information Service

This service regularly provides antivirus software and Microsoft Security Updates information in association with Yokogawa products.

Yokogawa provides various security solutions from endpoint to network boundary in your plant to solve the major challenges.

Network design and architecture
Yokogawa understands the need to secure protected areas of a plant. Accordingly, Yokogawa provides a secure network architecture, a design based on IEC 62443 that includes zoning or grouping of assets based on their security requirements. In addition, this secure network architecture is equipped with firewalls which are the first line of defense against intrusion from other networks.

Centralized AV/OS patch management
The need to protect a system from malicious attacks is critical for customers. Yokogawa’s Anti-Virus Management and OS Patch Management help secure the system by blocking any form of malicious software and fixing software vulnerabilities which could lead to the disruption of plant operation. In addition, Yokogawa offers “system hardening” which removes all non-essential software programs and utilities from plant workstations.

Network management system
The necessity for network devices to monitor the network status (i.e., network loading, network up/down) can be achieved through the network management system. In addition, the solution can monitor the usage of memory and hard disks of servers. This solution provides centralized management involving a dedicated network monitoring and management server as the point of administration for all monitored clients.

Network health check service
Communication traffic may appear to be working smoothly, but it cannot be seen with the naked eye. The network health check service provides clear reporting on network traffic, enabling close monitoring of all vital communication.

Backup and recovery system
Yokogawa understands that customers need to protect all information in their systems. The backup & recovery system ensures that all information remains intact even after an incident, thus facilitating rapid restoration of the system.

Centralized user/PC setting management
Yokogawa offers a solution that can easily manage all customer resources on a network. The active directory service simplifies user and computer management. Policies can also be created in the active directory to meet the security requirements of the customer. Yokogawa application user/groups will be seamlessly integrated with the active directory.