- BDEW white paper "Requirements for secure control and telecommunications systems" defines strict measures for safeguarding control systems in critical infrastructures
- Technical requirements include complete detection of manipulation attempts and secure communication
- Rhebo guide "BDEW White Paper in Practice" shows concrete solutions for the implementation of the requirements
Leipzig, 28 August 2018 - Energy and water management companies are obliged by the German IT Security Act to ensure the proper, secure operation of their information and telecommunications systems in a holistic, sustainable and verifiable manner. However, the law leaves open as far as possible how safe operation is to be implemented in the critical infrastructure.
The paper »Requirements for safe control and telecommunication systems« published by the Federal Association of Energy and Water Management (BDEW) and Austria's energy industry therefore translates these legal provisions into technical and organisational requirements. The second version of the white paper, published in May, defines detailed instructions and requirements. Core elements are complete network transparency and documentation, secure remote access, complete malware protection and consistent segmentation.
Kristin Preßler, Managing Director Rhebo
»The operators of control systems in critical infrastructure are thus faced with the challenge of monitoring their networks completely and continuously. With common security strategies such as firewalls and endpoint security, this cannot be achieved because they lack a real-time view of the inside of the control system. In our guideline we therefore explain how operators achieve the necessary transparency about communication processes, data transmission and access in their control systems by means of industrial anomaly detection in order to best address the strict requirements of BDEW white papers.«
The eight-page practical guide summarises the complex requirements of the BDEW white paper and explains clearly and concisely how industrial anomaly detection by Rhebo Industrial Protector supports meeting these requirements.
Network managers in energy and water companies immediately receive an overview of how they can effectively protect their control systems against disruptions such as cyber attacks, manipulation and technical errors and gain full transparency of their networks.
Rhebo is a German technology company that is specialized in ensuring the operational reliability of industrial control systems by monitoring control communications. Rhebo provides hardware, software and services to secure networked industrial control systems and Critical Infrastructures as well as to increase productivity. Rhebo is listed as one of the 30 top providers for industrial security in Gartner’s »Market Guide for Operational Technology Security 2017«. The company is member of Teletrust – IT Security Association Germany.