Centralized Cyber Security Management and Secure Remote Access to ICS/SCADA Systems for Critical Infrastructure Companies with Globally Dispersed Assets; including case study and lessons learned from

No ratings

Presented at ICScybersecCon 2014 by

Michael Coden

Matt Morris

NextNine and Cisco, working in partnership with a major oil company, have deployed a solution that centralizes the management of a full range of Cyber Security solutions and secure remote access for ICS/SCADA systems at critical infrastructure organizations with multiple globally distributed sites. This presentation will describe the lessons learned, technology developed, and actual implementation details at several production sites. Based on software technology developed by NextNine, that has been deployed by 5 major ICS vendors over the last 8 years, and hardware and managed services developed by Cisco, we will describe how we are able to centralize and cost effectively scale the following functions at globally dispersed critical infrastructure sites, including: 1) auto discover and maintain a real-time asset inventory; 2) deliver product specific vendor qualified OS and product patches, and anti-virus updates; 3) produce Compliance Reports tailored to operational and cyber security specific metrics; 4) collect log files for SIEM analysis; 5) transfer files securely into and out of remote sites for software delivery, off-site backup and restore; and 6) permit secure, granular, supervised, and recorded, remote access and desktop sharing of remote ICS/SCADA systems by internal and third party engineers.