Siemens opens cyber security operation centers to protect industrial plants

Siemens has opened multiple cyber security operation centers (CSOC) for the protection of industrial facilities, with a joint location in Lisbon and Munich and one in Milford, Ohio, the company announced this week. 

Siemens' industrial security specialists based at these sites monitor industrial facilities all around the world for cyber threats, warn companies in the event of security incidents and coordinate proactive countermeasures. 

These protective measures are part of Siemens' extensive plant security services offering, with which the enterprise supports companies in the manufacturing and processing industry in encountering security threats and increasing plant availability.

The increased networking of industrial infrastructures (Internet of Things, Industrie 4.0) calls for appropriate protective action for the automation environment, Siemens says. Services range from security assessments and the installation of protective measures, such as firewalls and virus protection (security implementation), through to the continuous surveillance of plants with managed security services, which is now offered by the CSOCs themselves. 

If the experts at Siemens detect an increased risk, they give the customer an early warning, issue recommendations for proactive countermeasures and coordinate their implementation, according to company officials. The countermeasures are based on the critical nature of the incident and the likely impact on the customer's business. They include modifying firewall rules or providing updates for closing gaps in security. 

In addition, Siemens provides forensic analyses of security incidents. Companies are then in a position to prepare reports that comply with international standards such as ISO 27002 or IEC 62443. Furthermore, companies also receive a transparent view of their plants' security status. 

Siemens' plant security services team uses products from the company's collaboration partner, Intel Security. These include: McAfee VirusScan, McAfee Application Control, McAfee ePolicy Orchestrator (ePO) as well as McAfee Enterprise Security Manager with Security Information and Event Management.