Industry: Electric power generation
ISSUE
As cybersecurity regulations are tightened, companies face the risk of penalties
As national and regional cybersecurity regulations were tightened, a company in the Middle East realized that its thermal power plant control system might not be able to meet the increased security requirements using existing measures. Avoiding citations and penalties from audits by regulators became an urgent matter.
SOLUTION
KEY POINTS TO THE SOLUTION
- Confirmed the necessary cybersecurity requirements and reviewed acceptable solutions
- Provided Netmation® Protect Pack (NPP) as the optimal solution to meet the requirements
- A service that continuously enhances security by issuing updates with the latest security patches
Confirmed the necessary cybersecurity requirements and reviewed solutions
Cybersecurity audit requirements vary by country and region. Mitsubishi Power confirmed the customer’s requirements and reviewed solutions that could meet the customer’s needs, such as issuing security patches, forwarding syslogs to the customer’s SIEM (Security Information and Event Management), and introducing anti-malware measures (blacklisting).
Provided Netmation® Protect Pack as the optimal solution to meet the requirements
After reviewing and proposing solutions that met the customer’s requirements, the full NPP package was deemed optimal and the decision was made to implement it.
NPP is an integrated security solution that combines multiple security software with the power plant control system DIASYS Netmation. Having confirmed that the primary functions of DIASYS Netmation would not be negatively affected, Mitsubishi Power provided the NPP package to the customer. Mitsubishi Power also supported the smooth operation of the system by providing training to the customer’s staff during the installation of the solution.
A service that continuously enhances security by issuing updates with the latest security patches
The frequency and complexity of cyber-attacks are constantly evolving. At the same time, cybersecurity requirements are continually updated. Power producers must continue to respond to both the attacks and the requirements. Mitsubishi Power provides a service that regularly issues security patches, even after the initial NPP installation.
Mitsubishi Power will continuously monitor the ever-changing cyber-attacks, global cybersecurity trends and the security requirements of each nation as it updates its products and provides solutions to protect power plants and meet its customers’ needs.
EXPECTED OUTCOME
- The latest cybersecurity measures will be maintained, protecting power plants from ever-changing cyber-attacks.
- By installing NPP, customers can reduce the risk of receiving citations from audits by cybersecurity regulators.
- After installation, the latest security patches are issued on a regular basis, providing continuous protection for power plants and avoiding citations and penalties from audits.