Cyber security is embedded into System 800xA
Cyber security is an important factor in all phases of ABB’s system life cycle and is an integral part of System 800xA. It is addressed at each stage of our system lifecycle - from design and development to operations and maintenance.
Threat modelling, security design reviews and security training of software developers are examples of actions taken at the earliest stages of the lifecycle. For controllers & communication cards, these measures are followed up by robustness tests at ABB’s Device Security Assurance Center (DSAC). DSAC, a Wurldtech accredited testing facility, performs “Level 2”-tests utilizing Wurldtech’s Achilles test platform. In addition, DSAC also test the devices with tools from for example Tenable networks, NMAP, and Spirent. 800xA provides a comprehensive and consistent set of embedded mechanisms to manage cyber security risks. Some examples are, role based access control, back-up and restore functionality, and utilization of IPSec. Finally, system deliveries follow our strict guidelines on handling cyber security.