Implement identified measures to increase the security level in automation systems and plant. Perform training measures, create security plans and guidelines and provide supervision for the introduction stage. Install and set up new technologies such as White-listing or Firewalls, and prepare continuous monitoring of system security status.

Portfolio

Security Awareness Training

Article No.

9AS1432-1AA11-1AB0

SITRAIN Security Awareness Training to increase security awareness in industrial sites. The training informs generally about vulnerabilities of industrial control systems and their threat landscape. Additionally the training explains specific security measures to increase the security level from a companies’ and operator's point of view. The MLFB contains access to SITRAIN learning platform for one trainee and for a 6 month period. Available languages: English, German.

Security Policy Consulting

Article No.

9AS1432-1AA11-1AB1

Consulting services on Industrial Control System (ICS) cyber security policies, processes, and procedures. Price per day; travel & incidental expense separate.

Network Security Consulting

Article No.

9AS1432-1AA11-1AC1

Security consulting service in the area of Network Security in ICS environments. Example service areas include: Zones & Conduit segmentation, Firewall Rule design & review. Price per day; travel & incidental expense separate.

Plant Perimeter Firewall Installation

Article No.

9AS1433-1AA11-1AB3

Installation and configuration of Perimeter Firewall. Pricing includes configuration of firewall rules with direct 1-to-1 relationship to existing firewall rules or design of maximum 40 new firewall rules.

Clean Slate Validation

Article No.

9AS1432-1AA11-1AB2

One-time virus scanning service with McAfee Command Line Scanner to identify potential security risks. No installations required. Price per day; travel & incidental expense separate.

Anti Virus Installation

Anti Virus Agent Installation

Article No.

9AS1432-1AA11-1AB7

Distribution and installation of the McAfee Anti Virus Agent on an endpoint system by utilizing the security management software McAfee ePolicy Orchestrator. After agent distribution to the endpoint system, an initial virus scan is carried out. For SIMATIC PCS 7, WinCC and TIA Portal corresponding system compatibilities have to be considered in order to maintain the availability of the plant. License costs for McAfee VirusScan Enterprise are not included. Target systems: i.a. SIMATIC PCS 7, WinCC and TIA Portal environments.

Anti Virus & Whitelisting Management Server Installation

Article No.

9AS1433-1AA11-1AB1

Installation and configuration of McAfee Security Management solution ePolicy Orchestrator for a central management of the McAfee Whitelisting and Anti Virus solution. The configuration contains the preparation to distribute the McAfee Whitelisting Agents to the endpoint systems. The preparation to distribute the McAfee Anti Virus Agents is additionally included for SIMATIC PCS 7, WinCC and TIA Portal. The configurations will be performed in accordance to the recommendations for SIMATIC PCS 7, WinCC, TIA Portal and SINUMERIK environments. Hardware and operating systems are not included.

Whitelisting Installation

Whitelisting Agent Installation

Article No.

9AS1432-1AA11-1AB8

Distribution and installation of McAfee Whitelisting Agent on an endpoint system by utilizing the security management software McAfee ePolicy Orchestrator. For SIMATIC PCS 7, WinCC, TIA Portal as well as SINUMERIK 840D components corresponding system compatibilities have to be considered in order to maintain the availability of the plant. License costs for McAfee Application Control are not included. Target systems: i.a. SIMATIC PCS 7, WinCC, TIA Portal and SINUMERIK 840D components.

Anti Virus & Whitelisting Management Server Installation

Article No.

9AS1433-1AA11-1AB1

Installation and configuration of McAfee Security Management solution ePolicy Orchestrator for a central management of the McAfee Whitelisting and Anti Virus solution. The configuration contains the preparation to distribute the McAfee Whitelisting Agents to the endpoint systems. The preparation to distribute the McAfee Anti Virus Agents is additionally included for SIMATIC PCS 7, WinCC and TIA Portal. The configurations will be performed in accordance to the recommendations for SIMATIC PCS 7, WinCC, TIA Portal and SINUMERIK environments. Hardware and operating systems are not included.

System Backup

Article No.

9AS1432-1AA11-1AB3

Execute backup of computer systems in ICS environment. Price per day; travel & incidental expense separate. Storage media separate. Symantec System Recovery software procured and owned by Customer.

Windows Patch Deployment

Article No.

9AS1432-1AA11-1AB6

Installation of automation-vendor compatibility-tested Microsoft OS patches as approved by Customer in ICS environments. Price per day; travel & incidental expenses separate. Patches or internet access to download patches from Microsoft to be provided by Customer. Customized service including installation of WSUS server can be set up.