Siemens SINAMICS Configuration Manual page 15

● Measures for ensuring integrity
To indicate any changes to the integrity, Siemens has implemented measures to safeguard
integrity in its products and manufacturing process.
● Hardening
Siemens constantly checks the measures for hardening:
– Operating systems are configured in such a way that points of attack, e.g. via ports of
– Siemens tests its products to detect weak points at an early stage.
– Siemens offers a specific hotfix/patch management.
As manufacturer of automation and drive products, Siemens supports secure operation for its
customers by securing the development infrastructure and supply chain.
● Siemens ProductCert (https://www.siemens.com/cert/en/cert-security-advisories.htm)
(Cyber Emergency Readiness Team)
The Cyber Emergency Readiness Team is the central department for security-related
incidents in the Siemens product and solution environment. Siemens ProductCERT
supports development work with consulting and other services. ProductCERT provides
information about current threats and vulnerabilities as well as the appropriate
countermeasures.
● Industrial Security
Industrial security is a dynamic and complex subject that requires continuous monitoring
and adaptation of new security measures. Information on how Siemens protects its products
and solutions against cyber attacks and how industry profits from the competence of
Siemens can be found on the Internet
industrial-security/always-active/Pages/Default.aspx).
As manufacturer of automation and drive products, Siemens supports secure operation for its
customers through direct support of integrators and operators. For this purpose, Siemens
provides patches, security components and the appropriate services.
● Security Information and Event Management-System (SIEM)
SIEMENS offers monitoring through a SIEM system to monitor the residual risk. SIEM has
become an established term in IT security. Such systems are able to identify and evaluate
security-relevant events and notify the administrator.
Siemens Industrial Holistic Security Concept™
Siemens places great emphasis on protecting the integrity and guaranteeing the confidentiality
of the processed data for its own products. Intellectual property and know-how of the Siemens
products are also in focus.
To achieve this, the Siemens Industrial Holistic Security Concept (SI HSC) is applied which
protects development departments and production plants. Multi-level security systems and
basic security improvements of the IT infrastructure are implemented. In parallel, process
improvements have been introduced and training in security awareness provided in the
development and production. These measures are continuously performed by Siemens and
clearly demonstrated by the security levels reached.
SI HSC also benefits the customers who Siemens has selected as partners for their industrial
solutions, or who want to orientate themselves on the concept. Siemens suppliers are also
Industrial Security
Configuration Manual, 08/2017, A5E36912609A
unneeded services, are minimized.
3.3 Why is Industrial Security so important?
(https://www.industry.siemens.com/topics/global/en/
Industrial Security
15