ABB Ability™ Cyber Security Services

Description
Applying industry best practices for network segregation and defense in depth. ABB Reference architecture aligned with International Maritime organization and Classification Society network segmentation requirements. 

Deliveries
Network segmentation design for vessels in operation as well as new build to be aligned with international requirements. ABB can assist to design the network as well as send cyber security experts onboard the vessel to install, configure and put in operation all network components required. 

Description
The Remote Access Platform (RAP) is default remote access solution from ABB, the solution provides a secure remote access as well as secure file transfer.

ABB’s Remote Access Platform allows highly secure, real-time central monitoring and control of devices located at customer sites. It also provides audit and security features, including audit logs to track user and application access.

The solution can be impowered with multifactor authentication to improve access hardening.

Deliveries
A full installation and configuration of remote access solution to support customers from remote in case of emergency, in addition provide a secure way to transfer date from and to system.

Through RAP ABB can transfer qualified security updates for Marine/ports Automation and advisory systems.

Description
ABB regularly verify Microsoft and Antivirus security updates for installation on delivered systems and keep systems up to date with latest security updates.

ABB Security update service help customers to regularly receive the updates and onboard the vessel without installing it. Installation of the updates done manually and periodically.

Deliveries
Downstream update server to receive security updates onboard the vessel through RAP (remote access platform), in addition configure system nodes to regularly receive applicable security updates from installed downstream update server 

Description
ABB experts work alongside customer team to outline and put into effect a detailed backup strategy and recovery plan.

Deliveries
Installation of the backup solution, develop backup and restore policy, develop recovery plan, write recovery procedures, build central storage of system backups and more.

Description
ABB portable media security address the risk of using USB media in industrial control systems. 

Deliveries
A robust solution preventing spreading of computer virus through USB media 

Description
Define and enforcing security policy for difference network zones 

Deliveries
Design, install and commission solution to prevent any unknown network node to communicate on the
network before fulfilling predefined security policy. 

Description
Using ABB whitelisting solution, customer can prevent attacks from unknown malware by allowing only known-good whitelisted applications to run.

ABB solution can easily find and manage application-related files. It groups binaries (.exe, .dll, drivers, and scripts) across the system by application and vendor, displays them in an intuitive, hierarchical format, and intelligently classifies them as well-known, unknown, and known-bad applications.

Deliveries
Full installation and commissioning of white listing solution onboard the vessel 

Description
After cyber security incident, system owner search for clear answer for What happened? When it happened? How did it happen? By whom? And more.

ABB log aggregation address the challenge and help customer to answer critical questions after cyber-attack by collecting system logs from all system software and hardware components and store it in central node onboard the vessel with possibility to send the logs to central operation center owned by customer. The solution powered by enhanced search/filtering engine to help customer search events and investigate.

Deliveries
Build log aggregation solution onboard the vessel in addition to execute needed modification on system infrastructure to successfully collect all system logs into one central node onboard the vessel and help customer to send logs to operation center if needed. 

Description
Security Information and Event Management (SIEM) system helps security administrator accurately detect and prioritize threats across the entire system, and it provides intelligent insights that enable administrator to respond quickly to reduce the impact of incidents.

Deliveries
Work with ship owner, ship operator and crew onboard to develop security policy and build, install and commission full SIEM system to alert the crew onboard in case of any security breach.

Description
ABB Cyber Security Asset Inventory automatically identifies cyber assets and captures updated inventory information on ports, services and software connected to the control networks. The solution enables users to make better operational, compliance and risk decisions related to cyber security controls, asset lifecycle and asset management. 

Deliveries
Design, install, deploy and commission a full cyber asset inventory solution onboard the vessel increasing customer visibility for vessel infrastructure and automatically detect newly connected nodes and components.

Augment your maintenance team with ABB's experienced cyber engineers to maintain your cyber security controls and systems. Our local team of engineers will work together with your team to oversee cyber security controls maintenance and implementation of your cyber security strategy.

Maintenance contract assessing crew to keep deployed solutions up to date and fulfill maritime cyber security process requirements.

Depending on what your maintenance needs are, the ABB team can work remotely or on-site. By delivering some services remotely, we can reduce costs and increase efficiency without affecting production.

To learn more about our cyber security maintenance capabilities and how we can help, contact your local ABB representative.

Whether you need help implementing a cyber security control, making changes to your architecture, or writing a security policy, our local industrial cyber security experts are available. We can help with specific projects of any size, or offer a flexible consulting program to fit your needs.

Our experts have extensive experience with the complexities of cyber security, availability, compliance and safety. They will work with you to devise a plan to accomplish your goals with minimal impact on production, while applying industry best practices and methods.

Strategy and Policy

ABB works with the customer to develop and document the customers' cyber security strategy and policy. 

Hardening

Makes sure that the defined settings of the computers in the system remain as defined by the DCS vendor and adjusted for the customers’ needs. Any change to the configuration results in a notification, and depending on the customers’ needs the correct configuration can be automatically restored by the system or manually by an engineer (customer or ABB).

Disaster Recovery

In case the worst thing happens and the customers' DCS system is compromised, it may be necessary to recover the system from backups. Disaster recovery is when ABB engineers work with the customer to resume production as quickly as possible after a cyber disaster. 

Remediation

Any work relating to implementing or addressing a cyber security weakness. 

Security Controls re-commissioning

ABB re-commission the system to comply with a specific cyber regulation or best practice. This often includes adding various security controls and applying ABBs Reference Architecture. 

Cyber security requirement specifications

Cyber security requirement specifications is a consulting service that provides customers with a detailed design principle for system cyber security based on DNV GL cyber secure class notation.

This service covering only Automation, Propulsion, Remote control system (RCS) and switchboard scope based on DNV GL Cyber Secure class notation requirements, other class requirements and specific customer or state requirements need to checked case by case before offering the service to customer. 

Once you've implemented your cyber security foundation, depending on risk factors and regulations, you may need to strengthen your cyber defenses with advanced services like event monitoring, incident response, and threat intelligence.

These types of cyber security services all require a blend of people and technology that ABB Collaborative Operations can deliver across our network of global operations centers. In each of our Collaborative Operations Centers (COCs), we have industrial cyber experts working side-by-side with security analysts and industry specialists to detect and analyze security events and threats that may affect our customers’ safety and production.

ABB join crew onboard to monitor, alert, report and prevent cyber attacks. In addition ABB can join the crew onboard to execute a disaster recovery if needed.

Key features of ABB Security Operations:

• 24/7 access to ABB's global team of industrial cyber experts
• The latest technology available from ABB Ability™ cloud computing, allowing you to detect cyber threats earlier
  
• Detailed data analytics to inform business decisions

To learn more about our cyber security Collaborative Operations capabilities and how we can help you, reach out to your local ABB representative or fill out the contact form below.