The exposure
Ransomware reaches the line through the office.
Most plant outages from cyber incidents start on the business network and cross into production because the two were never separated. Engineering workstations, MES servers and vendor laptops bridge the gap every day.
IEC 62443NIST CSFCMMC
■IT and OT separation at the MES boundary
■Engineering workstation and project file control
■Recovery plans for PLC logic and recipes
Typical topologyExposed path
L3.5 · DMZPlant DMZ
VENDOR VPN
L2 · HMILine HMI
L2 · SCADAMES / SCADA
L2 · HISTORIANProduction historian
L1 · PLCCell PLC
L1 · RTURobot controller
L1 · SAFETYSafety PLC
L0 · PROCESSConveyors · robots · drives · utilities
Where we start
