• Home

  • Technology

  • You Don't Have to Go it Alone: Achieving Cyber Security Using Co-Management Services
13
Achieving Cyber Security using Managed Services DON’T GO IT ALONE Mark Littlejohn June 23, 2016

You Don't Have to Go it Alone: Achieving Cyber Security Using Co-Management Services

Embed Size (px)

Citation preview

Page 1: You Don't Have to Go it Alone: Achieving Cyber Security Using Co-Management Services

Achieving Cyber Security using Managed ServicesDON’T GO IT ALONEMark Littlejohn

June 23, 2016

Page 2: You Don't Have to Go it Alone: Achieving Cyber Security Using Co-Management Services

Honeywell Confidential - © 2016 by Honeywell International Inc. All rights reserved.

Speaker: Mark Littlejohn

Mark is an industrial technology professional with over 30 years of

experience in the field of cyber security. He has assisted numerous

Fortune 500 companies in improving their security infrastructure

through assessing organizational risk, establishing strategic security

goals, and implementing sound technical solutions.

Mark previously served as Chief Information Security Officer for a

major petroleum manufacturer where his responsibilities included

regulatory compliance and the implementation of security for critical

controls systems. Mark currently leads Honeywell’s Managed

Industrial Cyber Security team which is responsible for providing real-

time monitoring and cyber security solutions to hundreds of

petroleum, chemical and manufacturing and customers.

1

Mark.Littlejohn@ Honeywell.com

Page 3: You Don't Have to Go it Alone: Achieving Cyber Security Using Co-Management Services

Honeywell Confidential - © 2016 by Honeywell International Inc. All rights reserved.

Industry-Leading Industrial Cyber Security

Proven and Trusted

2

• 100+ certified Industrial

Cyber Security experts

• Global team

• 100% dedicated to

Industrial Cyber Security

• Experts in process control

cyber security

• Leaders in security

standards ISA99 /

IEC62443 / NIST

• 10+ years industrial cyber

security

• 1,000+ successful industrial

cyber projects

• 350+ managed industrial

cyber security sites

• Proprietary cyber security

methodologies and tools

• Largest R&D investment

in industrial cyber security

• Strategic partnerships with

leading cyber security

product vendors

• Multi vendor solutions

• Industry first Cyber Security

Risk Manager

• State of art Industrial Cyber

Security Solutions Lab

ProvenExperience

Investment and Innovation

Industrial CyberSecurity Experts

Page 4: You Don't Have to Go it Alone: Achieving Cyber Security Using Co-Management Services

Honeywell Confidential - © 2016 by Honeywell International Inc. All rights reserved.

• Industrial Cyber Security Vulnerability & Risk Assessments

• Network & Wireless Assessments

• Cyber Security & Compliance Audits

• Policy and Procedures Development

• Firewall, Next Gen FW

• Intrusion Detection & Prevention (IDS/IPS)

• Access Control

• Industrial Patching & Anti-Virus

• End Node Hardening

• Portable Media/Device/USB Security

• Continuous Monitoring

• Compliance & Reporting

• Cyber Security Risk Manager

• Industrial Security Information& Event Management (SIEM)

• Cyber Security Awareness & Training

• Current State Analysis

• Secure Design and Optimization

• Zone & Conduit Separation

• Backup and Recovery

• Incident Response Planning

• Incident Response:On Site & Remote

• Forensics & Analysis

Solutions Addressing Cyber Security End to End

3

Page 5: You Don't Have to Go it Alone: Achieving Cyber Security Using Co-Management Services

Honeywell Confidential - © 2016 by Honeywell International Inc. All rights reserved.

Managed Industrial Cyber Security Services

Monitoring, Reporting and Honeywell Expert Support

4

Patch and Anti-Virus Automation

Security and Performance Monitoring

Activity and Trend Reporting

Advanced Monitoring and Co-Management

Secure Access

Tested and

qualified patches

for operating

systems & DCS

software

Tested and

qualified anti-

malware

signature file

updates

Comprehensive

system health &

cybersecurity

monitoring

24x7 alerting

against

predefined

thresholds

Monthly or

quarterly

compliance &

performance

reports

Identifying

critical issues

and chronic

problem areas

Honeywell

Industrial Cyber

Security Risk

Manager

Firewalls,

Intrusion

Prevention

Systems, etc.

Highly secure

remote access

solution

Encrypted,

two factor

authentication

Complete

auditing:

reporting &

video playback

Page 6: You Don't Have to Go it Alone: Achieving Cyber Security Using Co-Management Services

Honeywell Confidential - © 2016 by Honeywell International Inc. All rights reserved.

Patch and Anti-Virus AutomationBenefits

Automated, secure transfer of update filesHoneywell tested and qualified on equivalent releaseMaintains integrity of files through Secure Connection’s encrypted file transfer

Avoids file modification risk via transfers by email or portable media

Reduces delays required to obtain current files and patches

•Provides a local source of current, qualified patches for installation•Central management reduces manual, administrative work

Prevent Exploits, Infections and Application Malfunction

5

Patch Automation

• Microsoft WSUS and Experion

Patch Automation

Anti-Virus Automation

Anti-Virus Automation

• McAfee or Symantec

Page 7: You Don't Have to Go it Alone: Achieving Cyber Security Using Co-Management Services

Honeywell Confidential - © 2016 by Honeywell International Inc. All rights reserved.

Managed Industrial Cyber Security Services

Monitoring, Reporting and Honeywell Expert Support

6

Patch and Anti-Virus Automation

Security and Performance Monitoring

Activity and Trend Reporting

Advanced Monitoring and Co-Management

Secure Access

Tested and

qualified patches

for operating

systems & DCS

software

Tested and

qualified anti-

malware

signature file

updates

Comprehensive

system health &

cybersecurity

monitoring

24x7 alerting

against

predefined

thresholds

Monthly or

quarterly

compliance &

performance

reports

Identifying

critical issues

and chronic

problem areas

Honeywell

Industrial Cyber

Security Risk

Manager

Firewalls,

Intrusion

Prevention

Systems, etc.

Highly secure

remote access

solution

Encrypted,

two factor

authentication

Complete

auditing:

reporting &

video playback

Page 8: You Don't Have to Go it Alone: Achieving Cyber Security Using Co-Management Services

Honeywell Confidential - © 2016 by Honeywell International Inc. All rights reserved.

What is monitored

Windows and 3rd Party Nodes

ControllersNetwork devices

Experion Nodes

Performance Analyzers for 550+ Critical parameters

TPS

Safety Manager

Virtualization

Page 9: You Don't Have to Go it Alone: Achieving Cyber Security Using Co-Management Services

Honeywell Confidential - © 2016 by Honeywell International Inc. All rights reserved.

Managed Industrial Cyber Security Services

Monitoring, Reporting and Honeywell Expert Support

8

Patch and Anti-Virus Automation

Security and Performance Monitoring

Activity and Trend Reporting

Advanced Monitoring and Co-Management

Secure Access

Tested and

qualified patches

for operating

systems & DCS

software

Tested and

qualified anti-

malware

signature file

updates

Comprehensive

system health &

cybersecurity

monitoring

24x7 alerting

against

predefined

thresholds

Monthly or

quarterly

compliance &

performance

reports

Identifying

critical issues

and chronic

problem areas

Honeywell

Industrial Cyber

Security Risk

Manager

Firewalls,

Intrusion

Prevention

Systems, etc.

Highly secure

remote access

solution

Encrypted,

two factor

authentication

Complete

auditing:

reporting &

video playback

Page 10: You Don't Have to Go it Alone: Achieving Cyber Security Using Co-Management Services

Honeywell Confidential - © 2016 by Honeywell International Inc. All rights reserved.

System State Overview Reports

9

Page 11: You Don't Have to Go it Alone: Achieving Cyber Security Using Co-Management Services

Honeywell Confidential - © 2016 by Honeywell International Inc. All rights reserved.

Managed Industrial Cyber Security Services

Monitoring, Reporting and Honeywell Expert Support

10

Patch and Anti-Virus Automation

Security and Performance Monitoring

Activity and Trend Reporting

Advanced Monitoring and Co-Management

Secure Access

Tested and

qualified patches

for operating

systems & DCS

software

Tested and

qualified anti-

malware

signature file

updates

Comprehensive

system health &

cybersecurity

monitoring

24x7 alerting

against

predefined

thresholds

Monthly or

quarterly

compliance &

performance

reports

Identifying

critical issues

and chronic

problem areas

Honeywell

Industrial Cyber

Security Risk

Manager

Firewalls,

Intrusion

Prevention

Systems, etc.

Highly secure

remote access

solution

Encrypted,

two factor

authentication

Complete

auditing:

reporting &

video playback

Page 12: You Don't Have to Go it Alone: Achieving Cyber Security Using Co-Management Services

Honeywell Confidential - © 2016 by Honeywell International Inc. All rights reserved.

Secure Remote Access

11

• Highly Secure

- Individual accounts must be added to site and authorized

for specific devices

- Two-factor authentication required to access gateway

- Request for access must be submitted and approved for

each session

- Screen sharing allows monitoring of all activity

- Access can be disabled at any time

• Exceptional Audit Capabilities

–Comprehensive, detailed reporting of all activity

–Audits logs stored in two isolated locations

–Video recording and playback available

Page 13: You Don't Have to Go it Alone: Achieving Cyber Security Using Co-Management Services

Honeywell Confidential - © 2016 by Honeywell International Inc. All rights reserved.

Honeywell Security Service Center (SSC)

Amsterdam

Houston

12


Marketing: Don't try this alone

Marketing: Don't try this alone

Marketing
design.hr.com/Excellencesource/SSE Oct 2014 · 2016-07-13 · Millennials may be a large generation, but numbers alone don't create sales. The uniqueness of the generation separates

design.hr.com/Excellencesource/SSE Oct 2014 · 2016-07-13 · Millennials may be a large generation, but numbers alone don't create sales. The uniqueness of the generation separates

Documents
Decision-Making Skills. The most successful decision-makers don't act on impulse, intuition, or even experience alone; They have a system that they work

Decision-Making Skills. The most successful decision-makers don't act on impulse, intuition, or even experience alone; They have a system that they work

Documents
WOMEN’S MINISTRYfelicitychurch.org/.../08/Felicitations-for-August... · Teach me, Lord, What I don't know. Show me which way And where to go. Alone I stumble, Alone I fall, Leads

WOMEN’S MINISTRYfelicitychurch.org/.../08/Felicitations-for-August... · Teach me, Lord, What I don't know. Show me which way And where to go. Alone I stumble, Alone I fall, Leads

Documents
just UI razzle-dazzle. AJAXsakaguch/msis655/asaravala2005.pdfAJAX Developer's Toolkits coding AJAX applications can be challenging, but developers don't have to go it alone. A growing

just UI razzle-dazzle. AJAXsakaguch/msis655/asaravala2005.pdfAJAX Developer's Toolkits coding AJAX applications can be challenging, but developers don't have to go it alone. A growing

Documents
Don't Go It Alone When Trying To Sell Your Home!

Don't Go It Alone When Trying To Sell Your Home!

Real Estate
Benefits of Text Marketing Discover Why Other Advertising Techniques Don't Compare to Text Alone

Benefits of Text Marketing Discover Why Other Advertising Techniques Don't Compare to Text Alone

Business
Alone, Yet Not Alonealone Alone, Yet Not Alone • 72% of Americans experience loneliness • 33% feel lonely once a week • 40-45% retired Americans felt alone Alone, Yet Not Alone

Alone, Yet Not Alonealone Alone, Yet Not Alone • 72% of Americans experience loneliness • 33% feel lonely once a week • 40-45% retired Americans felt alone Alone, Yet Not Alone

Documents
detrytmiskeselskab.dkdetrytmiskeselskab.dk/wordpress/wp-content/uploads/Dont-Stop-Me … · Cm 44 don't don't don't don't Cm stop stop stop stop me Cm now, ing a Cm don't stop me

detrytmiskeselskab.dkdetrytmiskeselskab.dk/wordpress/wp-content/uploads/Dont-Stop-Me … · Cm 44 don't don't don't don't Cm stop stop stop stop me Cm now, ing a Cm don't stop me

Documents
REQUEST DEMO & PRICING€¦ · Don't rely on a resume alone. We'll help you separate the contenders from the pretenders upfront with prescreening questions and assessments. Use the

REQUEST DEMO & PRICING€¦ · Don't rely on a resume alone. We'll help you separate the contenders from the pretenders upfront with prescreening questions and assessments. Use the

Documents
Horizon Europe European Partnerships · Only support partnerships if there is evidence that they are more effectively achieving policy objectives than Horizon Europe alone Fewer partnerships

Horizon Europe European Partnerships · Only support partnerships if there is evidence that they are more effectively achieving policy objectives than Horizon Europe alone Fewer partnerships

Documents
wydaily.com · Avoid the Credit Trap — Handle Credit ssues Wisely Don't Go at it Alone — Tap into Community Resources ... Don't avoid talking to creditors. If falling behind on

wydaily.com · Avoid the Credit Trap — Handle Credit ssues Wisely Don't Go at it Alone — Tap into Community Resources ... Don't avoid talking to creditors. If falling behind on

Documents
Treating Diabetes and Dyslipidemia: Achieving …1]Part_2_Treating...starting pharmacotherapy if diet alone does not work. We would all like to see diet alone work but it does not

Treating Diabetes and Dyslipidemia: Achieving …1]Part_2_Treating...starting pharmacotherapy if diet alone does not work. We would all like to see diet alone work but it does not

Documents
NET SURFERS DON'T RIDE ALONE: VIRTUAL …williamwolff.org/wp-content/uploads/2013/09/Net-Surfers-Dont-Ride... · VIRTUAL COMMUNITIES AS COMMUNITIES Barry Wellman ... 1Message on the

NET SURFERS DON'T RIDE ALONE: VIRTUAL …williamwolff.org/wp-content/uploads/2013/09/Net-Surfers-Dont-Ride... · VIRTUAL COMMUNITIES AS COMMUNITIES Barry Wellman ... 1Message on the

Documents
Inclusive and Sustainable Industrialization in Agro & Food ... · • Food and Agriculture alone worth more than USD290 billion with job potential of 22 million new jobs • Achieving

Inclusive and Sustainable Industrialization in Agro & Food ... · • Food and Agriculture alone worth more than USD290 billion with job potential of 22 million new jobs • Achieving

Documents
Don't suffer alone poster

Don't suffer alone poster

Documents
Grace Alone Faith Alone Christ Alone Scripture Alone God’s Glory Alone

Grace Alone Faith Alone Christ Alone Scripture Alone God’s Glory Alone

Documents
Social Shopping: Friends Don't Let Friends Buy Alone

Social Shopping: Friends Don't Let Friends Buy Alone

Technology
Blogging. don't try this alone

Blogging. don't try this alone

Social Media
Grace Alone. Faith Alone. Scripture Alone. · Grace Alone. Faith Alone. Scripture Alone. ... It is for freedom that Christ has set us free. Stand firm, ... authority, I forgive you

Grace Alone. Faith Alone. Scripture Alone. · Grace Alone. Faith Alone. Scripture Alone. ... It is for freedom that Christ has set us free. Stand firm, ... authority, I forgive you

Documents
Justified by faith alone, through grace alone in Christ alone

Justified by faith alone, through grace alone in Christ alone

Spiritual
localgiving-user-pics.s3.amazonaws.comlocalgiving-user-pics.s3.amazonaws.com/Marketing...Localgiving 13 tips for running a successful appeal Don't go it alone Make sure you get some

localgiving-user-pics.s3.amazonaws.comlocalgiving-user-pics.s3.amazonaws.com/Marketing...Localgiving 13 tips for running a successful appeal Don't go it alone Make sure you get some

Documents
Born alone to be alone

Born alone to be alone

Documents
Don't Take His Eye, Don't Take His Tooth, and Don't Cast

Don't Take His Eye, Don't Take His Tooth, and Don't Cast

Documents
WordPress.com · 1. If you live alone - don't advertisethe fact. Useonly your surname and InitialsInthe telephonedirectory. on doorbellsand nameplates. . 2. Don't encourage peepingtoms

WordPress.com · 1. If you live alone - don't advertisethe fact. Useonly your surname and InitialsInthe telephonedirectory. on doorbellsand nameplates. . 2. Don't encourage peepingtoms

Documents
I Don't Want to Be Alone

I Don't Want to Be Alone

Documents
Detecting drug-resistant tuberculosis in chest radiographs · 2018. 11. 8. · drug-sensitive and drug-resistant TB automatically by com-putational means, let alone achieving this

Detecting drug-resistant tuberculosis in chest radiographs · 2018. 11. 8. · drug-sensitive and drug-resistant TB automatically by com-putational means, let alone achieving this

Documents
Don't shop alone

Don't shop alone

Technology
735 Windwood Drive Walnut, Ca 91789 February 2019...7. Take prospective members to meetings - don't expect them to come alone. 8. Assign hostesses-new members should never sit alone!

735 Windwood Drive Walnut, Ca 91789 February 2019...7. Take prospective members to meetings - don't expect them to come alone. 8. Assign hostesses-new members should never sit alone!

Documents
catWorkX Midsummer Day - JIRA Merge - Don't try this alone · The information contained in this presentation is proprietary to Lufthansa Technik AG and is disclosed in confidence

catWorkX Midsummer Day - JIRA Merge - Don't try this alone · The information contained in this presentation is proprietary to Lufthansa Technik AG and is disclosed in confidence

Documents