Keep an eye on the transformer fleet from the comfort of your desk and control it online if necessary - this is possible with automation solutions such as ETOS®. But who protects the data from unauthorized access and what happens if a security gap is discovered in a software module? Operators of energy infrastructure have a special obligation when it comes to IT security and not only they, but also the manufacturers of the products used, must remain vigilant and continuously do their homework. If you can rely on well thought-out cybersecurity concepts in this regard, you can relax and enjoy the many benefits of automation.
Automation? (Cyber-) Secure!
Digitized transformers save time and money, but they have to be secure. That's why cybersecurity must be designed to be just as reliable and forward-looking as the hardware.
Automation? (Cyber-) Secure!
Digitized transformers save time and money, but they have to be secure. That's why cybersecurity must be designed to be just as reliable and forward-looking as the hardware.
„Thanks to our preliminary work and many years of experience, we can offer legally and technically secure products in this regard.“
Cybersecurity fends off digital threats and protects IT systems and networks from unauthorized access by focusing on three main protection goals: Confidentiality, integrity (i.e., preventing unauthorized access to or even modification of data), and availability (i.e. operational readiness of the system).
The task extends over the entire product life cycle – from security by design in product planning through development, programming and production, and extending over the entire period of use. During this long phase, it is important to systematically monitor the software for newly discovered security vulnerabilities. Then, resulting risks must be assessed as quickly as possible, and customers must be informed and provided with security updates. "With cybersecurity, you always have to be on the ball. This applies to all areas of the company," says information security expert Dr. Hubert Feyrer, who is responsible for this area at Reinhausen.
Cybersecurity at MR
MR applies the same high standards to its digital solutions as it does to its hardware. Cybersecurity at MR is based on ISO 27001, the leading international standard for information security management systems (ISMS) which defines measures to achieve the highest level of information security and provides guidelines for the systematic analysis, detection and remediation of cyber risks.
ETOS®, the open operating system for transformers, is the product where cyber security is particularly important. MR is currently establishing an ISMS in accordance with ISO 27001, focusing on ETOS® and the delivery of ETOS® software updates. All technical and administrative areas of MR relevant to the product are involved in the project. "Implementation is strictly in accordance with standards," says Dr. Hubert Feyrer. "The Plan-Do-Check-Act cycle of the management system specifies the steps required for this."
ETOS® & TESSA - Cyber security in action
One example of how MR implements cybersecurity in a product is ETOS® in conjunction with the online maintenance tool TESSA® APM. Here, communication must be shielded in such a way that, on the one hand, data can only be read in a secure manner but not changed and, on the other hand, no attacks on the customer's systems are possible. The necessary encryption infrastructure is developed by IT specialists in collaboration with the departments involved. Security by design ensures that risks are identified and dealt with at an early stage and provides for independent checks before delivery to customers. During the subsequent field phase, MR systematically monitors the products for vulnerabilities and provides software updates on myReinhausen as required.
What's next?
In cybersecurity, "staying on the ball" means keeping an eye not only on technical developments but also on adjustments by legislators. One example of this is the draft Cyber Resilience Act, which sets EU-wide requirements for products with digital elements. "We are well prepared for this," emphasizes Dr. Hubert Feyrer. "Thanks to our preliminary work and many years of experience, we can offer legally and technically secure products in this regard."
