Now in its 20th year, Cybersecurity Awareness Month October 2024 is highlighting the growing importance of cybersecurity in our daily lives and encouraging individuals and industries to take important industrial cybersecurity steps to keep plants safe and control systems secure. Empowering more secure, interconnected industrial plants.
This episode features a discussion between Angel Lopez and Max Kon about industrial cybersecurity. Max highlights the importance of ISA standards in industrial automation and cybersecurity, emphasizing his active involvement in ISA activities and training programs. Max’s journey underscores the evolution of cybersecurity in control systems and his dedication to promoting cybersecurity awareness and standards within the industry.
CrowdStrike, an American cybersecurity firm, released a configuration update for its Falcon sensor software that inadvertently triggered a catastrophic chain reaction.
Every professional who designs configure and maintain any type of control systems, need to learn about zones and conduits and manage the new security requirements and develop necessary skills according to their function, even if they are not into industrial cybersecurity.
We see very often how companies (through their security staff) go shopping and rush to spend, often pushed by the pressure of the business, the inertia of the market, lack of knowledge, skill and opportunism of suppliers, before performing a good risk assessment.
We have already talked about the need to perform an industrial cyber risk analysis, and this time we will address one of the mistakes most commonly assumed "and accepted" by enthusiasts in industrial cybersecurity. Risk analysis based on vulnerabilities or consequences?
Today marks 10 years of WisePlant, in our first decade as an independent company, We have strengthened our position in the different disciplines of industrial security, and especially in cybersecurity for industrial applications, in sectors such as energy, oil, gas, continuous manufacturing in general, batch manufacturing and industrial discrete processes.
When the owner of the industrial plant has the possibility of having the best of both worlds, the best control systems and the best security. When the consequences occur the damage is done, and there is no turning back. That is why we say that it is never too late to deal with security (redesign), but the sooner much better (design).
Especially during the second half of 2020 it has been very difficult to stay active, the months of isolation, the presence of the pandemic, social responsibility, obligations, commitments, and individual needs, absolutely everything was and continues to be under threat, pressure and stress.
The new training courses 2150, 2160, 2161, and 2162 are dedicated exclusively and primarily to implementation and compliance, with the ZCM system developed by WisePlant Group LLC. Users are able to begin implementation and begin to comply immediately and without delay with all the requirements of the ISA/IEC-62443 series of standards.
Last June 2020, motivated and driven by the circumstances that continue to affect the whole world, the managers have made a strategic business decision. Several of the solutions and services that they had been offering and providing successfully, were greatly affected by the crisis generated as a result of COVID-19.
The official ISA/IEC-62443, IC34 and IC37 professional training and certification courses use a real physical laboratory with equipment connected in a small network, simulating a control system. Each of the participants of the course will be able to enter remotely to each of the designated machines, to carry out the practical exercises in class.
To our employees, customers, shareholders and the public we serve.
In light of developments related to COVID-19, we would like to say first that our thoughts are with those affected by the virus around the world. In response to the pandemic, WisePlant stands ready to serve people during these uncertain times, and we are committed to getting it right and collaborating in solidarity. Most importantly, we want you to know that our top priority in response to COVID-19 is the health and safety of our employees. Since the beginning of this pandemic, we have focused the Company’s resources and expertise on addressing the most urgent challenges posed by COVID-19. In our group we have suffered some non-direct losses, but relatives of our collaborators and very close friends. We are living in very distressing times. The economic impact and rising unemployment has reached historic levels today. Many of the services we provide have been impacted, suspended, postponed. The investment capacity of many major companies is being cut very significantly, and the security measures taken make the regular provision of services and supplies difficult. As a result, our ability to supply the portfolio of products, solutions and provide regular services has also been impacted, as a result of the multiple prevention and security measures that governments and companies have had to adopt. It is our mission to act responsibly in recovering the activity, the functioning of the value chain, the maintenance of essential services and the well-being of people and society.
What were we and are we still working on?
Adopt adequate emergency and mitigation measures to overcome this situation. Our response to COVID-19 calls on all of us to be flexible, resilient, and compassionate as we do our part.
Help our employees who may need to miss work and ensure that no one feels compelled to work if they feel sick or have direct contact with someone who has COVID-19.
Adapt our operations to protect the health and well-being of our employees and the people they serve.
Adapt the portfolio of products, solutions and services to supply with the new rules, which we hope will not be permanent. New work methodologies, new administrative processes, new infrastructure, new everything!
Work with our customers and operations teams to obtain resources and technology to work remotely, while maintaining perceived value and quality.
Help the public access information and assistance from essential government health and safety programs.
Recover the stable functioning of the value chain with a renewed offer of products, solutions and services, appropriate to the current situation.
Recover the chain of payments and the maintenance of operations in a continuous and uninterrupted way.
COVID-19 is unlike any other crisis we have addressed in recent memory. The threat is truly global: it moves across borders on a timeline that no one can predict with certainty, meaning we can’t simply transfer calls and work to other program sites outside the affected areas. We are making significant progress in the change to teleworking by providing equipment and adaptations in many aspects. We continue to move forward and are collaborating with our clients to create solutions and acquire resources that support the continuity of the Company’s work virtually, for which we have a robust technology and a culture of flexibility that allows our staff to perform their work efficiently and effectively remotely. Furthermore, we will continue to tailor our approach to meet your specific needs, and we will adapt and communicate with you as circumstances change. In the meantime, we want to assure you that we will continue to provide you with uninterrupted service.
It will be difficult, but we will get through it.Here’s what we’re doing and what you need to know.
January 16, 2020: ISA Global Cybersecurity Alliance begins the new year with several priority projects underway and an expanded group of companies and organizations as members.
ARPEL (Regional Association of Companies in the Oil, Gas and Bio-fuels Sector in Latin America and the Caribbean) recently signed a memorandum of cooperation with WisePlant Group, with the aim of jointly promoting projects, studies, events and courses related to cybersecurity in critical infrastructures, in the search to make the most of the strengths of each one for the benefit of this issue that every day has more relevance in the oil industry and gas.
Once again we were present at the Seminar on Industrial Cybersecurity and Critical Infrastructures ARPEL 2018 organized by ARPEL, OAS, YPF and the Ministry of Modernization of the Argentine Republic, with the support of important companies in the market.
The sinking of the Titatic is one of the most iconic catastrophes in history. Even today the interest in knowing details of its history does not wane. There are many lessons to be learned from the disastrous fate of the gigantic vessel, known as the safest in the world.
