Honeywell: Lifecycle Solutions & Services

Introduction

Control systems are an integral part of the industrial infrastructure today—not just in North America, but around the world. We have come to understand that control systems share some Information Technology (IT) similarities with corporate business systems; however, control systems are technically, administratively, and functionally more complex and unique than business IT systems.

Vulnerabilities, particularly cyber security, affect the safe, functional performance of both control systems and business IT systems.

However, mainstream IT is quite knowledgeable and experienced with the threats and management of the security environment— perhaps years ahead of the current status of control systems. We do have the opportunity to learn from the experiences of business IT and shorten the time span for control systems to acquire the same level of security awareness.

One of the main reasons for this difference in cyber security maturity is the difference in focus between business IT and control systems.

Control systems have focused on equipment efficiency and reliability, while cyber security was left to the business IT organizations.

However, this situation is changing. And, we see that the convergence of IT and control systems requires expertise from both business IT and industrial control systems.[i]

We call this convergence Industrial IT.

This Honeywell IT white paper covers:

Table of Contents

• Introduction

• Securing Your Critical Information

• An Ongoing Process that Requires a Logical Approach

• Increased Accessibility Requirements and

• Tighter Linkage between Business and Process Information

• Complex Array of Tools, Standards and Best Practices

• Targeted Malicious Cyber Security Threats

• Increase in Industry and Government Regulations or Standards

• Increased Emphasis on Uptime, Availability & ReliabilityTable of Contents Style

• An Organized, Logical Approach to Securing Your Critical Infrastructure

• The Assess Phase

• The Remediate Phase

• The Manage Phase

• The Assure Phase

• Summary