Protecting industrial operations from cyberthreats should always be top of mind. However, with operations networks being often very complex and cyber threats growing increasingly more sophisticated,\u2026 Read more on Cisco Blogs<\/a><\/p>\n

\u200b<\/p>\n

Protecting industrial operations from cyberthreats should always be top of mind. However, with operations networks being often very complex and cyber threats growing increasingly more sophisticated, it can be difficult to know where to start. Kam Chumley-Soltani recently held a webinar outlining best practices to protect your industrial environment from cyber threats. Kam is a Technical Solutions Architect in Cisco\u2019s industrial IoT group, working with customers every day to help them drive their OT security projects. Sign up to watch the replay:\u00a0 Protecting industrial networks from cyber threats: Where do I start?<\/a><\/p>\n

In the webinar, Kam recommends a stepped approach towards a mature ICS\/OT security strategy, implementing the following best practices:<\/p>\n

1. See everything on your industrial network<\/strong><\/h2>\n

You can\u2019t secure what you don\u2019t know about. You need full visibility into your industrial network and OT security posture, so you have the information you need to reduce the attack surface, segment the industrial network, and enforce cybersecurity policies. Cisco Cyber Vision<\/a> gives you real-time, detailed visibility into your industrial assets, their communication patterns, and application flows. It embeds visibility capabilities into industrial network equipment, so there\u2019s no need for dedicated security appliances or to build out-of-band SPAN collection networks.<\/p>\n

2. Segment the network into smaller trust zones<\/strong><\/h2>\n

Network segmentation is key to securing your network and protecting critical industrial processes. It\u2019s also a requirement of the ISA\/IEC62443 security standards<\/a>. Using dedicated security appliances for zone segmentation requires you to deploy additional hardware, create and maintain firewall rules, or even change network wiring and IP addresses. You can avoid this extra cost and complexity by extending software-based network segmentation policies to industrial control networks. Cisco Identity Services Engine (ISE)<\/a> works with network switches, routers, and wireless access points to restrict communications as per the defined zones. And it uses groups defined in Cyber Vision<\/a> to allow\/deny communications for each asset and drives collaboration between IT and OT teams.<\/p>\n

Join us for a webinar on October 31 for more details on how to comply with the ISA\/IEC62443 security standards<\/a>.<\/em><\/strong><\/p>\n

3. Secure remote access to OT assets<\/strong><\/h2>\n

Remote access is key for operations teams, vendors, and contractors to configure, maintain, and troubleshoot OT assets without time-consuming and costly visits. However, many existing remote access solutions create security backdoors or come with many tradeoffs Cisco Secure Equipment Access (SEA)<\/a> is solving the challenges of deploying secure remote access to operational assets at scale and brings all the benefits of a zero trust network access (ZTNA) solution to industrial operations. There is no dedicated hardware to install and manage and no complex firewall rules to configure and maintain.<\/p>\n

If you want to learn more, join us for a session on ZTNA on October 25 for IIoT World Cybersecurity Day<\/a>.\u00a0<\/em><\/strong><\/p>\n

For more details on how to get started with your industrial security journey, watch Kam\u2019s webinar replay<\/a> or come to the SecurityWeek ICS Cybersecurity Conference<\/a> in Atlanta next week, where Anastasia Mills and Kam Chumley-Soltani will be presenting a breakout session on Wednesday, October 25 at 10:25 am PST.<\/p>\n

<\/a><\/p>\n

This is the largest and longest-running event series focused on industrial cybersecurity. The conference attracts ICS stakeholders across a host of industries and a variety of OT, IT, government, vendors, and more. Make sure you stop by the Cisco Booth #18<\/strong> to discuss further and meet the team.<\/p>\n

\n\t\tShare\n

\n

<\/div>\n<\/div>\n

\n

\n\t\t<\/a>\n\t<\/div>\n<\/div>\n

\n

\n\t\t<\/a>\n\t<\/div>\n<\/div>\n

\n

\n\t <\/a>\n\t<\/div>\n<\/div>\n<\/div>\n

Share:<\/div>\n

\n

\n

<\/div>\n<\/div>\n

\n

\n\t\t<\/a>\n\t<\/div>\n<\/div>\n

\n

\n\t\t<\/a>\n\t<\/div>\n<\/div>\n

\n

\n\t <\/a>\n\t<\/div>\n<\/div>\n<\/div>\n

\u00a0\u00a0Discover how Cisco can help you protect your industrial network from cyber threats with a stepped approach towards a mature industrial control systems\/OT security strategy.\u00a0\u00a0Read More<\/a>\u00a0Cisco Blogs\u00a0<\/p>","protected":false},"excerpt":{"rendered":"

<\/p>\n

Protecting industrial operations from cyberthreats should always be top of mind. However, with operations networks being often very complex and cyber threats growing increasingly more sophisticated,\u2026 Read more on Cisco Blogs<\/a><\/p>\n

\u200b<\/p>\n

Protecting industrial operations from cyberthreats should always be top of mind. However, with operations networks being often very complex and cyber threats growing increasingly more sophisticated, it can be difficult to know where to start. Kam Chumley-Soltani recently held a webinar outlining best practices to protect your industrial environment from cyber threats. Kam is a Technical Solutions Architect in Cisco\u2019s industrial IoT group, working with customers every day to help them drive their OT security projects. Sign up to watch the replay:\u00a0 Protecting industrial networks from cyber threats: Where do I start?<\/a><\/p>\n

In the webinar, Kam recommends a stepped approach towards a mature ICS\/OT security strategy, implementing the following best practices:<\/p>\n

1. See everything on your industrial network<\/strong><\/h2>\n

You can\u2019t secure what you don\u2019t know about. You need full visibility into your industrial network and OT security posture, so you have the information you need to reduce the attack surface, segment the industrial network, and enforce cybersecurity policies. Cisco Cyber Vision<\/a> gives you real-time, detailed visibility into your industrial assets, their communication patterns, and application flows. It embeds visibility capabilities into industrial network equipment, so there\u2019s no need for dedicated security appliances or to build out-of-band SPAN collection networks.<\/p>\n

2. Segment the network into smaller trust zones<\/strong><\/h2>\n

Network segmentation is key to securing your network and protecting critical industrial processes. It\u2019s also a requirement of the ISA\/IEC62443 security standards<\/a>. Using dedicated security appliances for zone segmentation requires you to deploy additional hardware, create and maintain firewall rules, or even change network wiring and IP addresses. You can avoid this extra cost and complexity by extending software-based network segmentation policies to industrial control networks. Cisco Identity Services Engine (ISE)<\/a> works with network switches, routers, and wireless access points to restrict communications as per the defined zones. And it uses groups defined in Cyber Vision<\/a> to allow\/deny communications for each asset and drives collaboration between IT and OT teams.<\/p>\n

Join us for a webinar on October 31 for more details on how to comply with the ISA\/IEC62443 security standards<\/a>.<\/em><\/strong><\/p>\n

3. Secure remote access to OT assets<\/strong><\/h2>\n

Remote access is key for operations teams, vendors, and contractors to configure, maintain, and troubleshoot OT assets without time-consuming and costly visits. However, many existing remote access solutions create security backdoors or come with many tradeoffs Cisco Secure Equipment Access (SEA)<\/a> is solving the challenges of deploying secure remote access to operational assets at scale and brings all the benefits of a zero trust network access (ZTNA) solution to industrial operations. There is no dedicated hardware to install and manage and no complex firewall rules to configure and maintain.<\/p>\n

If you want to learn more, join us for a session on ZTNA on October 25 for IIoT World Cybersecurity Day<\/a>.\u00a0<\/em><\/strong><\/p>\n

For more details on how to get started with your industrial security journey, watch Kam\u2019s webinar replay<\/a> or come to the SecurityWeek ICS Cybersecurity Conference<\/a> in Atlanta next week, where Anastasia Mills and Kam Chumley-Soltani will be presenting a breakout session on Wednesday, October 25 at 10:25 am PST.<\/p>\n

<\/a><\/p>\n

This is the largest and longest-running event series focused on industrial cybersecurity. The conference attracts ICS stakeholders across a host of industries and a variety of OT, IT, government, vendors, and more. Make sure you stop by the Cisco Booth #18<\/strong> to discuss further and meet the team.<\/p>\n

\n\t\tShare<\/p>\n

\n

<\/div>\n<\/div>\n

\n

\n\t\t<\/a>\n\t<\/div>\n<\/div>\n

\n

\n\t\t<\/a>\n\t<\/div>\n<\/div>\n

\n

\n\t <\/a>\n\t<\/div>\n<\/div>\n<\/div>\n

Share:<\/div>\n

\n

\n

<\/div>\n<\/div>\n

\n

\n\t\t<\/a>\n\t<\/div>\n<\/div>\n

\n

\n\t\t<\/a>\n\t<\/div>\n<\/div>\n

\n

\n\t <\/a>\n\t<\/div>\n<\/div>\n<\/div>\n

\u00a0\u00a0Discover how Cisco can help you protect your industrial network from cyber threats with a stepped approach towards a mature industrial control systems\/OT security strategy.\u00a0\u00a0Read More<\/a>\u00a0Cisco Blogs\u00a0<\/p>\n

<\/p>\n","protected":false},"author":0,"featured_media":1418,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[12],"tags":[],"class_list":["post-1417","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cisco-learning"],"yoast_head":"\n