From ISSSource.com: It’s easy to think a main control system is secure in a brownfield or greenfield facility. After all, with all the design requirements and connections coming into the DCS, vendors have that all figured out way ahead of time.
But what about the package systems or skids that connect to the main system? How secure are they? My take is these systems often end up purchased from the lowest bidder. And when that happens, you have to ask if security is even mentioned at all in the purchasing requirements.
“Packaged system vendors are looking to cut down costs, because when they’re bidding for a greenfield project, one of the highest levels of criteria for winning that bid is cost,” said Eric Forner, chief technology officer and co-founder of cybersecurity provider, Armexa. “And if those cybersecurity requirements are not baked in to the requirements, they won’t be there simply.”
Also available in most audio podcast portals
