VDMA
Industrial Security - act now!
At SPS IPC Drives 2016, the VDMA will be focusing on the topic of 'Building knowledge for industrial security'. As the speaker responsible for security, Steffen Zimmermann will explain the industry association's activities in this area.
Mr. Zimmermann, what is the current situation in the mechanical and plant engineering sector in terms of cyber security and how is the association responding to this?
Zimmermann: With the networking and digitalization of machines and systems, the vulnerability to cyber attacks is also growing. In a security survey conducted for the first time in 2013, we examined the impact of security incidents in production. Even back then, 29% reported direct production downtime - at a time when nobody was talking about digitalization! In addition, there are increasing calls at a political level to introduce mandatory IT liability, security labels or certificates for networked machines in Germany or the EU. We can expect a 'CE directive for cybersecurity', so to speak.
What advice would you give to those affected?
Zimmermann: Ask yourself what your system-specific risks are, who the attackers are and what the right measures are. In addition to technology, this primarily requires functioning processes and trained personnel on the part of manufacturers, integrators and operators. The VDMA offers first aid with the 'Industry 4.0 Security Guide'. At the trade fair, we will also be presenting the new 'Security guidelines for mechanical and plant engineering', which describe a feasible path for SMEs through the comprehensive IEC 62443 standard on 'Industrial Control Systems Security'. In contrast to the Industry 4.0 guidelines, this is not just about future systems and their security, but about securing systems currently in operation that do not have comprehensive integrated security features.
The VDMA has also developed an online learning course on security in Industry 4.0. What exactly is behind this?
Zimmermann: The biggest challenge for small and medium-sized companies is to build up the necessary knowledge of industrial security. Experts with IT, production and security knowledge at the same time are hard to come by - and when they do, they often go to large and visible market leaders. It is therefore extremely important for SMEs to make their own designers and developers fit for the challenges of digitalization. As a guide is not enough for this, we have developed an online learning course lasting several hours together with the start-up University4Industry (U4I). This is aimed at engineers who want to build up knowledge beyond the information content of the VDMA guide. Developed together with mechanical engineers, the learning course offers individual and practical help. The learning course is free of charge for employees of VDMA members. There is a good insight at www.u4i.io/trailer.









