How to strengthen cyber defenses and meet security requirements

Industry: Electric power generation

ISSUE

As cybersecurity regulations are tightened, companies face the risk of penalties

As national and regional cybersecurity regulations were tightened, a company in the Middle East realized that its thermal power plant control system might not be able to meet the increased security requirements using existing measures. Avoiding citations and penalties from audits by regulators became an urgent matter.

Avoiding citations and penalties from audits

SOLUTION

KEY POINTS TO THE SOLUTION

  • Confirmed the necessary cybersecurity requirements and reviewed acceptable solutions
  • Provided Netmation® Protect Pack (NPP) as the optimal solution to meet the requirements
  • A service that continuously enhances security by issuing updates with the latest security patches

Confirmed the necessary cybersecurity requirements and reviewed solutions

Cybersecurity audit requirements vary by country and region. Mitsubishi Power confirmed the customer’s requirements and reviewed solutions that could meet the customer’s needs, such as issuing security patches, forwarding syslogs to the customer’s SIEM (Security Information and Event Management), and introducing anti-malware measures (blacklisting).

Cybersecurity requirements by country or region

Provided Netmation® Protect Pack as the optimal solution to meet the requirements

After reviewing and proposing solutions that met the customer’s requirements, the full NPP package was deemed optimal and the decision was made to implement it.
NPP is an integrated security solution that combines multiple security software with the power plant control system DIASYS Netmation. Having confirmed that the primary functions of DIASYS Netmation would not be negatively affected, Mitsubishi Power provided the NPP package to the customer. Mitsubishi Power also supported the smooth operation of the system by providing training to the customer’s staff during the installation of the solution.

Gas turbine

A service that continuously enhances security by issuing updates with the latest security patches

The frequency and complexity of cyber-attacks are constantly evolving. At the same time, cybersecurity requirements are continually updated. Power producers must continue to respond to both the attacks and the requirements. Mitsubishi Power provides a service that regularly issues security patches, even after the initial NPP installation.

Mitsubishi Power will continuously monitor the ever-changing cyber-attacks, global cybersecurity trends and the security requirements of each nation as it updates its products and provides solutions to protect power plants and meet its customers’ needs.

Maintenance of security measures

EXPECTED OUTCOME

  • The latest cybersecurity measures will be maintained, protecting power plants from ever-changing cyber-attacks.
  • By installing NPP, customers can reduce the risk of receiving citations from audits by cybersecurity regulators.
  • After installation, the latest security patches are issued on a regular basis, providing continuous protection for power plants and avoiding citations and penalties from audits.