Thomas Pilz:<\/strong> Without indus\u00adtrial secu\u00adrity, safety would no longer be pos\u00adsible. In the past the two fields were con\u00adsid\u00adered sep\u00ada\u00adrate enti\u00adties, but now indus\u00adtrial secu\u00adrity encom\u00adpasses safety and ensures its integrity. This rethinking can be clearly seen in the ongoing revi\u00adsion of the Machinery Direc\u00adtive, as in the new ver\u00adsion secu\u00adrity is under\u00adstood to be part of the safety chain. And I whole\u00adheart\u00adedly agree with this.<\/p>\n\n\n\n Exactly. When it comes to safety, one assumes that a person is injured due to a mechan\u00adical move\u00adment, but there is no mali\u00adcious intent behind their actions and they are at worst grossly neg\u00adli\u00adgent. With secu\u00adrity this is totally dif\u00adferent, as mali\u00adcious intent is assumed: A crim\u00adinal wants to damage the machine.<\/p>\n\n\n\n First we must assume that the risk to secu\u00adrity is always present and that we must always be on guard. Safety is posi\u00adtioned oppo\u00adsite to this, where pos\u00adsible risks can be detected and rec\u00adti\u00adfied through reg\u00adular checks. This nat\u00adu\u00adrally also affects the risk assess\u00adment. We at Pilz are con\u00advinced that a holistic approach is nec\u00ades\u00adsary, as the terms safety and secu\u00adrity \u2013 as pre\u00advi\u00adously stated \u2013 are inter\u00adwoven. Our experts have been trained on this and point out pos\u00adsible risks and vul\u00adner\u00ada\u00adbil\u00adi\u00adties as well as appro\u00adpriate mea\u00adsures in dis\u00adcus\u00adsions with cus\u00adtomers.<\/p>\n\n\n\n Aware\u00adness is changing, par\u00adtic\u00adu\u00adlarly with the increase in hacker attacks since 2017. After all, every prof\u00aditable com\u00adpany can become the target of this type of attack. With the imple\u00admen\u00adta\u00adtion of Indus\u00adtrie 4.0 and the Internet of Things with per\u00adma\u00adnently net\u00adworked machines, the threat level is crit\u00adical if no mea\u00adsures have been taken. But we have noticed that there is much uncer\u00adtainty when it comes to dealing with secu\u00adrity. That is why our holistic approach to safety and secu\u00adrity is so impor\u00adtant to us and we would like to improve our cus\u00adtomers\u2019 and part\u00adners\u2019 aware\u00adness of this topic. Taking action early on means being pro\u00adtected against manip\u00adu\u00adla\u00adtion or attacks, thereby ensuring not only the safety of humans and machinery but also the pro\u00adduc\u00adtivity.<\/p>\n\n\n\n That is an inter\u00adesting ques\u00adtion because it seems obvious that part of cyber secu\u00adrity would be keeping soft\u00adware up to date. In reality, how\u00adever, this is not always nec\u00ades\u00adsary, or can even lead to a lim\u00adi\u00adta\u00adtion of pro\u00adduc\u00adtivity. Before an oper\u00adator per\u00adforms updates on their older machine \u2013 and thus brings man\u00adu\u00adfac\u00adturing to a stand\u00adstill \u2013 it is worth\u00adwhile to ask whether the machine should be net\u00adworked with other machines or whether it can work as a \u201cstand-alone\u201d. If the latter is the case, the latest soft\u00adware state is not absolutely nec\u00ades\u00adsary. If net\u00adworking is required, reg\u00adular updates increase the safety and secu\u00adrity. Highly gran\u00adular seg\u00admen\u00adta\u00adtion of the OT net\u00adwork and the use of fire\u00adwalls such as our Secu\u00adri\u00adty\u00adBridge also offer addi\u00adtional pro\u00adtec\u00adtion. This appli\u00adca\u00adtion fire\u00adwall pro\u00adtects indus\u00adtrial automa\u00adtion net\u00adworks against manip\u00adu\u00adla\u00adtion and \u00adenables pro\u00adtected con\u00adnec\u00adtions, e.g. in a cloud.<\/p>\n\n\n\n Retro\u00adfitting is gen\u00ader\u00adally rel\u00ada\u00adtively simple: \u00adSecu\u00adri\u00adty\u00adBridge, for example, can be quickly set up by an elec\u00adtri\u00adcian or qual\u00adi\u00adfied IT per\u00adsonnel thanks to the auto-con\u00adfig\u00adu\u00adra\u00adtion. Another impor\u00adtant topic is the con\u00adtrol of access per\u00admis\u00adsions so that only autho\u00adrised per\u00adsons have access to a process. With the devices from the PIT\u00admode range, safe oper\u00adating modes and access per\u00admis\u00adsions can be imple\u00admented with high flex\u00adi\u00adbility and in accor\u00addance with our cus\u00adtomers\u2019 respec\u00adtive spec\u00adi\u00adfi\u00adca\u00adtions. Meaning safety and secu\u00adrity in one system.<\/p>\n","protected":false},"excerpt":{"rendered":" Increasing digi\u00adti\u00adsa\u00adtion in the smart fac\u00adtory is accom\u00adpa\u00adnied by new chal\u00adlenges when dealing with safety. Thomas Pilz, Man\u00adaging Partner at Pilz, is inter\u00adviewed about cur\u00adrent devel\u00adop\u00adments and the changing under\u00adstanding of safety and indus\u00adtrial secu\u00adrity.<\/p>\n","protected":false},"author":27,"featured_media":900,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"wp_typography_post_enhancements_disabled":false,"footnotes":""},"categories":[19,17,7,24,1,11],"tags":[],"class_list":["post-594","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-industrial-security","category-insights","category-issue-3-2022","category-pilz-talking","category-pilz-magazine","category-trends"],"acf":[],"_links":{"self":[{"href":"https:\/\/pilz-magazine.com\/en\/wp-json\/wp\/v2\/posts\/594","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/pilz-magazine.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/pilz-magazine.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/pilz-magazine.com\/en\/wp-json\/wp\/v2\/users\/27"}],"replies":[{"embeddable":true,"href":"https:\/\/pilz-magazine.com\/en\/wp-json\/wp\/v2\/comments?post=594"}],"version-history":[{"count":2,"href":"https:\/\/pilz-magazine.com\/en\/wp-json\/wp\/v2\/posts\/594\/revisions"}],"predecessor-version":[{"id":1626,"href":"https:\/\/pilz-magazine.com\/en\/wp-json\/wp\/v2\/posts\/594\/revisions\/1626"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/pilz-magazine.com\/en\/wp-json\/wp\/v2\/media\/900"}],"wp:attachment":[{"href":"https:\/\/pilz-magazine.com\/en\/wp-json\/wp\/v2\/media?parent=594"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/pilz-magazine.com\/en\/wp-json\/wp\/v2\/categories?post=594"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/pilz-magazine.com\/en\/wp-json\/wp\/v2\/tags?post=594"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}But there is still a fundamental difference in the understanding of the two terms, \u00adsafety and security, right?<\/h5>\n\n\n\n
What are the implications for risk assessment?<\/h5>\n\n\n\n
You already mentioned that the standards are changing with regard to security. What do you think is the situation when it comes to awareness: Do you find that operators are doing enough to protect their plants?<\/h5>\n\n\n\n
What challenges come along with \u00adsecurity? Is it enough to always supply \u00admachines with the latest updates?<\/h5>\n\n\n\n
WiHow can older machines be made safe and secure?<\/h5>\n\n\n\n