{"id":12356,"date":"2018-05-21T11:00:06","date_gmt":"2018-05-21T19:00:06","guid":{"rendered":"http:\/\/www.palada.net\/index.php\/2018\/05\/21\/news-6125\/"},"modified":"2018-05-21T11:00:06","modified_gmt":"2018-05-21T19:00:06","slug":"news-6125","status":"publish","type":"post","link":"http:\/\/www.palada.net\/index.php\/2018\/05\/21\/news-6125\/","title":{"rendered":"Oil and Gas Report: Keeping Connected Safety Systems Safe"},"content":{"rendered":"

Credit to Author: Guest Blogger| Date: Mon, 21 May 2018 14:00:29 +0000<\/strong><\/p>\n

\"\"<\/p>\n

Greg Hale, Chief Editor of ISSSource<\/p>\n<\/div>\n

We are pleased to host Greg Hale, chief editor of ISSSource, as our guest blogger in the Oil & Gas section as he shares the outcome of interviewing several Schneider Electric experts on the topic of safety and reliability:<\/strong><\/p>\n

Author’s remarks…Increased connectivity in the oil and gas industry is already here, but that connectivity \u2013 and the advancement of the Industrial Internet of Things (IIoT) \u2013 can bring additional agita to safety and security professionals working on any platform.\u00a0\u00a0<\/em>Attacks against critical infrastructure are increasing. As the attack against a Saudi Arabian gas facility showed, a connected system linked to a safety system has the potential to fall victim if there is a lack of proper cybersecurity practices, policies and procedures.\u00a0<\/em>The same is true for the attacks against the Ukrainian power grid in 2016 and 2017.\u00a0<\/em>That all could sound like a hopeless situation. But the reality is there are answers and solutions.<\/em>The following story can help guide users to finding the right solution to protecting and keeping safety systems safe so they can do their job.<\/em><\/p>\n

\"\"Safety, Connectivity and IIoT<\/strong><\/p>\n

Increased connectivity across any manufacturing enterprise, from the oil and gas industry all the way to making buttons for a clothing line, has the potential to hike business intelligence, productivity and profitability.<\/p>\n

The catch is, though, with the coming age of that hike in connectivity, better known as the Industrial Internet of Things (IIoT), cybersecurity becomes a huge factor that can make or break a manufacturing enterprise. Add in the potential for an increased attack surface with more Internet-connected devices and not only do automation systems face turbulent waters, but so does the last line of defense: Safety systems.<\/p>\n

As the attack against a Saudi Arabian gas facility that occurred in August 2017 showed, a connected system linked to a safety system has the potential to fall victim if there is a lack of proper cybersecurity practices, policies and procedures.<\/p>\n

While that may sound dire, the reverse is true. With manufacturers taking cybersecurity seriously and with proper cyber hygiene, any facility can prosper in the age of IIoT.<\/p>\n

\u201cIt is definitely recognized getting security right is just as important as getting safety right. If you compromise any part of the safety system, it doesn\u2019t matter how much time, money and effort you have spent designing and implementing the system correctly, if they are defeated they will not do the job you need,\u201d said Sven Grone, Safety Services Practice Lead Asia Pacific & Middle East for \u200eSchneider Electric.<\/p>\n

With IIoT continuing its growth curve, Gartner, Inc. forecasted 8.4 billion connected things will be in use worldwide this past year, which was up 31 percent from the year before, and will reach 20.4 billion by 2020. Total spending on endpoints and services was predicted to almost $2 trillion last year.<\/p>\n

Ample Connectivity<\/strong><\/p>\n

With the forecasted increase in connected things of almost 250 percent by 2020, there is no doubt that safely managing connectivity will increasingly be the focus for any manufacturing facility.<\/p>\n

\u201cThe more information you extract from devices in the field, the better you can manage your system and be armed with information to deal with potential issues before they become an incident,\u201d Grone said. \u201cGetting the information from the field and being able to act on it lets you operate the plant in a safer fashion, provided you\u2019ve recognized the potential vulnerabilities these increasingly connected devices bring, and you have a comprehensive plan in place to mitigate and manage these.\u201d<\/p>\n

Along those lines, the opposite is true: Not having a solid cybersecurity program could stall the growth of IIoT and the potential benefits of increased productivity and reduced costs, which are goals of manufacturers today.<\/p>\n

\u201cUnless we adequately address cybersecurity, I don\u2019t see any IIoT in a high criticality environment, but on the reverse, maybe 90 percent of processes are not critical,\u201d said Yusuf Kapadia, Principal Technical Safety Consultant, Safety Systems Portfolio at Schneider Electric. \u201cSo, something in an organization that produces specific components in the multi-millions in a day, these industries are very much Internet-connected and have produced massive amount of improvement in terms of throughput in profitability. Oil and gas is a different thing though, almost everything falls under a high criticality environment.\u201d<\/p>\n

Avoiding Hype<\/strong><\/p>\n

With increased connectivity, a well-thought out plan involving the entire manufacturing team is needed, one important factor is not getting caught up in the hype \u2013 especially when it comes to safety.<\/p>\n

\u201cNumber one, you only connect where it makes sense,\u201d said Steve Elliott, Senior Director at Schneider Electric. \u201cEverybody is on the back of the tidal wave of emotion saying I have got to have IIoT and be connected and digital. Does it make sense to my business? Is it solving a business problem? You need to follow three simple steps: Does it makes sense? If so, what are the risks and threats that can hit me? And then how do I protect against it and what do I have to do. It is that simple, there is no rocket science in it.\u201d<\/p>\n

With that boost in connectivity, collecting and analyzing safety data is key, however, getting that information and not compromising the system in the process remains vital.<\/p>\n

\u201cYou want the data from the safety system because there is valuable information to be had. If you listen to what the safety systems are telling you, you\u2019ll find a lot of hidden value,\u201d Elliott said. \u201cSo, get the data and save it somewhere securely so the user can consume it. You will not write to the safety systems, as a matter of fact, you should keep this as far away from that as possible.\u201d<\/p>\n

\u201cIIoT does have a play from a safety vigilance perspective from a dashboard type of application providing plants with a much better understanding of about how safe their plants are in any given hour,\u201d said Michael Chmilewski, Vice President Process Safety Business at Schneider Electric. \u201cBut not from a perspective of ever putting a safety system anywhere near devices connected to anything outside the plant.\u201d<\/p>\n

Employing Good Practices<\/strong><\/p>\n

This was one of the problems the Saudi Arabian gas facility faced in that attack in August 2017 when an Internet facing system fell victim to the attack called Triton, Trisis or HatMan and affected the DCS and safety system.<\/p>\n

\u201cWhat happened with Triton was a complete failure in good practices, policies and procedures when it comes to cybersecurity,\u201d Chmilewski said.<\/p>\n

With a safety system, the argument has circulated for years about whether it should be separate, interconnected or interfaced with the control system and that discussion has just ratchetted up over the past six months.<\/p>\n

Safety as an Island<\/strong><\/p>\n

\u201cYou will never have a safety system that is a black box sitting in the corner just doing its thing like you would have had 40 to 50 years ago,\u201d Grone said. \u201cNowadays, the systems need to be managed because you have to get information out of them. The key is understanding what they are connected to, recognizing what the potential threats are, and have the right risk mitigation plan in place.\u201d<\/p>\n

\u201cSafety as an island is the next default,\u201d Kapadia said. \u201cYou would need some kind of data intelligence and some kind of value driven software. As long as you place it within an island, it should be OK.\u201d<\/p>\n

\u201cI think it is important to isolate the safety system as much as possible and monitor and manage whatever network traffic between the two there is,\u201d Chmilewski said. \u201cSo, you are only sharing the information you need for the DCS to do its job, which should be allowing only the protocol and the traffic that is necessary to pass data back and forth between the two.\u201d<\/p>\n

No matter if the safety system is separate or connected, IIoT\u2019s increased connectivity promises great rewards, but manufacturers need to heed the call to understand and adopt a solid cybersecurity regimen to ensure a protected safety system.<\/p>\n

\u201cSafety is your last line of defense,\u201d Kapadia said, \u201cIf you are not cybersecure, then you\u2019re not necessarily safe. Learn from others, not from your own mistakes.\u201d<\/p>\n

\"\"<\/a> <\/p>\n

 <\/p>\n

To learn more…Downlonad your FREE WhitePaper Five steps for enhancing industrial process safety through IIoT and Digitization<\/em><\/strong>\u00a0here<\/a><\/p>\n

\u00a0\u00a0<\/strong><\/p>\n

The post Oil and Gas Report: Keeping Connected Safety Systems Safe<\/a> appeared first on Schneider Electric Blog<\/a>.<\/p>\n

http:\/\/blog.schneider-electric.com\/feed\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Credit to Author: Guest Blogger| Date: Mon, 21 May 2018 14:00:29 +0000<\/strong><\/p>\n

We are pleased to host Greg Hale, chief editor of ISSSource, as our guest blogger in the Oil & Gas section as he shares the outcome of interviewing several Schneider… Read more »<\/a><\/p>\n

The post Oil and Gas Report: Keeping Connected Safety Systems Safe<\/a> appeared first on Schneider Electric Blog<\/a>.<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_container_layout":"default_layout","colormag_page_sidebar_layout":"default_layout","footnotes":""},"categories":[12389,12388],"tags":[18489,4500,16794,12581,18490,12512,12513,18491,12508,12411,17806,713],"class_list":["post-12356","post","type-post","status-publish","format-standard","hentry","category-scadaics","category-schneider","tag-automation-saftey","tag-cybersecurity","tag-dcs","tag-digitization","tag-greg-hale","tag-iiot","tag-iiot-networks","tag-isssource","tag-machine-and-process-management","tag-oil-and-gas","tag-process-safety","tag-safety"],"_links":{"self":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/12356","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/comments?post=12356"}],"version-history":[{"count":0,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/12356\/revisions"}],"wp:attachment":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/media?parent=12356"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/categories?post=12356"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/tags?post=12356"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}