There are many standards, guidelines and practices that provide guidance and direction on how to design and establish an effective industrial cybersecurity program, but there is less information available on how to manage one once it is in place. Addressing the cybersecurity of industrial systems cannot be viewed as a project, since the effort must continue indefinitely in the face of changing risks and technical capabilities. There must be means of measuring effectiveness on an ongoing basis in order to determine when it is appropriate to shift emphasis to new areas.
The ISA and IEC 62443 standards and other sources refer to the use of maturity levels as part of this exercise, and ARC has published research on a proposed maturity model. The purpose of this workshop is to discuss effective practices and lessons learned by end users in the ongoing management of their industrial cybersecurity programs.
The U.S. Department of Homeland Security (DHS) sponsors and provides a broad range of tools, services, and other resources to assist end users in improving the security of their industrial control systems. This includes the operation of the Industrial Control Systems Cyber Emergency Response Team (ICS-CERT), whose mission is to guide a cohesive effort between government and industry to improve the cybersecurity posture of control systems within the nation's critical infrastructure.
This workshop will provide a general overview of DHS activities in this area, as well as an update on current and evolving risks.
The vision of the IIoT is compelling - central vendor experts draw valuable conclusions for individual customers, using knowledge gained from many customers. But security and interoperability concerns are impeding adoption. Software-based cyber solutions always contain vulnerabilities, and the risk of an attack pivoting from customer to customer via cloud providers is a serious concern. Interoperability is a barrier as well, since industrial protocols, applications, and data formats are alien to cloud infrastructures.
Join us to learn how unidirectional gateway technology can be applied to enable secure IIoT connectivity with cloud services and industrial cloud providers, such as GE's Predix. This includes support for popular cloud interfaces, applications, and formats.
It has been a few years since NIST developed the Cybersecurity Framework in response to U.S. Presidential Directive 13636. More recently, attention has focused on collecting information on how this framework has been used by various organizations in the design and operation of various cybersecurity programs.
Workshop panelists will discuss experiences in this area, including work by the Automation Federation to promote use of the Framework. There will also be an update on more recent developments by NIST related to the evolution of the framework.
Workshop attendees will be encouraged to share their experiences, impressions, and ideas related to this subject.
Reliable, efficient, and ecological energy is critical for national security and prosperity. This is driving new developments in renewable energy and micro grids. At the same time, it is creating new cybersecurity challenges that need to be considered in FERC and NERC activities around Critical Infrastructure Protection (CIP). Ensuring the security of new developments is essential, but avoiding constraints on innovation and rapid adoption is equally important.
NERC CIP is already a key driver for cybersecurity investments by Utilities and Independent Power Producers, as well as those by vendors of power generation and T&D products and services. While people in the industry appreciate the need to secure critical power networks, many are frustrated with what they see as an excessive focus on data collection and reporting. They feel that this generates little value for power providers and diverts limited resources from critical cybersecurity maintenance tasks.
Are there ways for NERC to achieve their security goals with less focus on compliance? Are there ways to ensure that compliance doesn’t hinder adoption of new technologies and business strategies? Are there benefits that companies in this ecosystem can reap from compliance that are being overlooked? Can NERC’s efforts to change CIP standards from proscriptive to risk-based resolve the apparent compliance challenges?
This session will provide an opportunity for attendees to hear different views on these issues and learn what companies can do to address them. Workshop attendees will also have an opportunity to share their concerns and suggestions with a panel of experts. This session will provide valuable insight for anyone involved with power industry cybersecurity, including companies involved in power generation and delivery as well as cybersecurity solution providers with an interest in this challenging market.
What is the implication of the Industrial Internet of Things (IIoT) and Industrie 4.0 on ICS cybersecurity? Will the trend toward large scale interconnection of smart devices make it more difficult (or even impossible) to secure industrial systems? Or does the use of smart“edge devices” simply change our approach to network segmentation and the definition of zones and conduits? Will existing standards such as ISA/IEC 62443, NER-CIP, and ISO-27000 have to be rewritten to remain relevant in the face of new architectures?
The panelists will address these and other questions, drawing on the experience and expertise in the design and operation of IIoT systems. Workshop participants will learn more about developments in this area, and have an opportunity to offer their opinions and experiences.
ARC will present the overall industrial market dynamics and guide the attendees through recent technology selection projects for Operational Analytics and Machine Learning.
This session will help suppliers and implementation partners gain a better understanding of the business and functional requirements for this emerging set of platforms and tools. End users will learn about use cases, selection criteria, and the importance of each.
Implementing an End-to-End IIoT Solution for Your Enterprise
Inductive Automation and its strategic partner Cirrus Link Solutions will introduce Ignition Edge: a lightweight, limited version of Ignition made specifically for embedding into field and OEM devices at the edge of the network. Ignition Edge works with full, centralized Ignition Gateways to extend Ignition functionality to the edge of the network at a very affordable price point. With this solution, Ignition empowers enterprises to build complete IIoT infrastructures - from the edge of the network to the Cloud to local sites - all on one universal platform. At the presentation, learn about different architectures that can be created with Ignition Edge and see a live demonstration of the software.
This session will review the status of the 3 "open" process automation programs now in progress.
Managing cybersecurity is a major challenge for most industrial organizations. Lack of people, expertise, and timely access to cyber assets are common problems that undermine efforts to sustain desired security posture. Lack of comprehensive asset inventories and change management support add to these challenges. All of this limits management visibility into the real risks of cyber attacks and compliance violations.
This session will begin with an ARC overview of the growing market of cybersecurity management solutions and their adoption in various industrial segments. Presentations by end users will follow and discuss use of these tools and benefits being received. An open panel discussion will follow the presentations to allow attendees to discuss their own issues with these experts.
Attendees will get an update on critical cybersecurity products and learn what benefits peers are getting from applying these tools. This information will be of benefit to owner/operators and suppliers of cybersecurity solutions in the industrial sector.
The rapid adoption of the Industrial Internet of Things (IIoT) has established proven solutions with lower risk and costs. IIoT is being used for predictive maintenance (PdM) and enterprise asset management (EAM) – particularly for critical assets.
The proven solutions using IIoT have enabled broader adoption of PdM. Approaches range from engineered algorithms for specific types of assets to machine learning that is taught good behavior and alerts for unusual occurrences.
For EAM, IIoT offers new opportunities to further optimize performance. Those involved in asset management measure performance against KPIs for uptime, asset longevity, cost control, safety, and product quality. EAM systems combined with IIoT provide the visibility needed to manage the diverse set of resources and improve these metrics.
In this session, users tell their case stories to help you discern an appropriate IIoT, PdM, and EAM strategy, and explore the intersection of these domains.
With today's emphasis on making manufacturing more "intelligent" and efficient, it is critical to have instant access to actionable, in-context information about operational performance. Operational Analytics, Operational Intelligence, and Manufacturing Intelligence technologies and practices are available to help users tap into the vast amount of data available in the plant, exposing it as intelligent information on dashboards and other visualization tools. In addition to process data, this in-context information includes operations, business information, operations data, key performance indicators (KPIs), and other metrics. The data can be visualized in various formats, including mobile devices enabled by cloud computing.
This session will emphasize the business results that can be gained from the visualization and dashboards that make the information readable and easy to understand. Real-time analytics provide the ability to perform dynamic analysis on real-time and historical data for actionable results that improve performance. Operational analytics can help deliver information and intelligence that enable the user to make better and more timely, actionable decisions. Manufacturers in all complex or highly regulated industries are incorporating these technologies – from aerospace, to food, to chemicals and refining.
Intrusion and breach detection is being used by many companies for the protection of enterprise systems. This enables rapid detection, isolation, and management of intrusions and limits the impact on critical business processes.
While the potential benefits are large, effective use of these products in plant environments has been limited. Companies are still concerned with the potential impact of disruptions to real time performance and false positives. Lack of cybersecurity resources to analyze and react to alerts is another key inhibitor..
This session will begin with an ARC overview of intrusion and breach detection solutions and their adoption in various industrial segments. An open panel discussion will follow with a group of experts in industrial anomaly and detection solutions. This will provide attendees an opportunity to gain a better understanding of the various approaches and to discuss their concerns about the adoption of this technology in their facilities.
Attendees will get an update on intrusion and breach detection products and learn what peers are doing to apply them in securing plant systems. This information will be of benefit to owner/operators and suppliers of cybersecurity solutions in the industrial sector.
Operational analytics software, mobility, and the manufacturing intelligence market is growing rapidly in all industries. Operational analytics is about integrating, contextualizing, analyzing, and exposing the data in dashboards that illustrate the metrics for the users. The operational analytics market is growing because businesses are seeing a lot of value in the data. However, companies need a way to find the value in the data - to see the ROI. Operational analytics leverage operational data in-context and exposes the value to the organization. The software helps tie the data to specific goals that increase efficiency and productivity. The data can be visualized in various formats including mobile devices enabled by cloud computing.
Operational analytics applications leverage analytic software tools and turn data into actionable insights and intelligence. This session will emphasize the business results that can be gained using the software. Users will show use cases that demonstrate their success and the value that they are obtaining from implementing the software with measurable performance, ROI, and value.
Process disruptions lead to lower production levels, off spec products, and potential failures. Low asset availability and unplanned downtime result in lost production and excessive maintenance costs. Low asset availability increases capital costs and lowers production capacity. These challenges can only be solved with a greater understanding of how the process impacts the asset and vice versa.
This session will focus on how increasing reliability throughout the entire plant lifecycle requires a systems perspective to predict equipment and process failures accurately, precisely understand when and why the failure will occur, and offer a prescriptive response.
Industry experts will talk about how analytics help them optimize business decisions from design, operations, and maintenance perspectives, and how deep process domain and modeling expertise combined with data science provide the rich context necessary to predict and avoid asset performance issues accurately. From the design and maintenance operations points of view, we will examine how reliability modeling, failure monitoring, and machine learning prioritize and address the most vulnerable and critical assets as the assets and the business conditions they operate within change. Participants will discuss how asset analytics deliver the insights and intelligence needed for decision-making that determines a competitive differentiation for asset owners.
Improve Performance and Reduce Operational Risk with Intelligent Asset Strategies
The promise of the Industrial Internet of Things (IIoT) is real, but enabling it requires connecting information sources, analytics, machine learning, and best practices gained from years of industry implementation. Intelligent asset strategies help drive improved asset performance and reliability, regulatory compliance, reduced operational risk, and optimized costs. Intelligent asset strategies can help you answer the following questions:
Join GE for an exclusive interactive breakfast to learn about intelligent asset strategies to find out how companies are using IAS to improve metrics and realize powerful business outcomes.
Beyond the News Headlines: Four Key ICS Security Myths
Mainstream media coverage of cyber security can make it problematic for industrial control leaders to ascertain risk and act in a realistic and pragmatic fashion to protect their enterprise. Based on deep technical research into cyber physical attacks and extensive experience with real-world environments, Honeywell Lead Cyber Security Researcher Marina Krotofil dissects key ICS myths surrounding network endpoints, Russian attack attribution, attacker profiles, and the failure of imagination facing the industrial sector. Learn what’s most important to consider when evaluating process controls risk and how to prepare now to prevent future attacks.
Too often process automation is taken for granted. It is often viewed as a utility in that it keeps the plant operating within limits. After all, the plant processes are where the real value is created– right? The process plant assets convert your raw material feed stock into finished product that you then sell! While it is true that you cannot make the products you sell without the right production equipment in place, it is also true that to produce the right products, at the right quality, with the least amount of production cost, you need automation to do this. The question is are you leaving any opportunities to add more value to your production with your current operations.
This session is focused on recognizing value that may be missed with the current approach to automation. Identifying lost opportunities in the past is one way of looking at it, but in a more positive way, this session is designed to help owner-operators find ways to create more value going forward.
The lack of cybersecurity expertise within plants is a fundamental issue for industrial companies. Given the uniqueness of industrial control system cybersecurity, hiring additional staff can be difficult. Plant management also struggles to justify the additional costs given the low likelihood of serious cyber attacks.
Companies are considering two major approaches to address this situation: centralized, corporate cybersecurity operations groups; and, managed services offered by automation system vendors and third parties. Users need to understand the different benefits and costs of each approach in order to select the best strategy for their unique situation.
This session will begin with an ARC overview of cybersecurity operations groups and managed service offerings and their use in various industrial settings. Presentations by end users will follow and cover their experiences with these strategies and recommendations for what others should consider as they address their own challenges. An open panel discussion will follow the presentations to allow attendees to discuss their own issues with these experts.
Attendees will get an update on cybersecurity management strategies and services offered by third parties. They will learn what peers are doing to select the most effective and efficient approach and how this might vary according to industry, region, etc. This information will be of benefit to owner/operators and suppliers of cybersecurity services in the industrial sector.
New platforms, emerging operational and maintenance practices, and new organizations inside and outside an industrial process facility are required for industrial transformation.
Although plant operations and maintenance typically generate vast quantities of data that is both structured and unstructured, operations and engineers can only leverage a small percentage of these data to make better decisions. Most process data from plant systems is stored in process historian archives and represent a challenge to make predictions about process conditions or the assets that may perform poorly and impact the process bottom line.
Machine learning and operational analytics will leverage your current data and complement current plant infrastructure. Project and design engineers, production specialists, and operators can predict more precisely what is occurring or what will happen in the future with continuous and batch industrial processes.
This session will provide valuable insight for anyone involved with technology planning in the process industries. This includes end users with a mission to shift operations and maintenance to proactive approaches looking to minimize cost and improve production, safety, and reliability.
Augmented reality (AR) can be leveraged to deliver best practices across enterprise processes. AR can improve work safety while reducing cost and rework by enhancing human capabilities. By delivering more resources to workers, it can increase their productivity and ability to handle more types of work, including routine maintenance and emergencies. It can also limit the effects of "brain drain" by capturing best practices and driving organizational knowledge and expertise across all parts of operation, from plant to field. Additionally, it helps workers more effectively manage an increasingly complex, digital work environment, enabling better gathering and use of information for decision making as data is delivered faster among people, systems, and devices.
Participants will learn more about AR developments as a best practices solution, hearing about both current and future applications of augmented reality.
Manufacturing is very rapidly moving into an era where emerging technologies and digitalization are changing the face of production systems, manufacturing processes, supply chains, and even the work force. The digital transformation taking place throughout industries is affecting all stages of the product lifecycle from design, simulation, production, maintenance, and service in the field. Moreover, with the advance of IIoT technologies and smart, connected factories, new materials, and advanced fabrication technologies, manufacturing is going through some extraordinary changes.
This session will examine emerging manufacturing technologies like additive manufacturing and hybrid machine tools, applied materials science, advanced predictive and prescriptive analytics for manufacturing that use machine learning, operational intelligence, cloud-based connectivity for production equipment, IIoT, the digital twin, virtual reality and augmented reality, advanced simulation solutions, and more. Leading PLM suppliers and other technology suppliers will bring customers that represent early adopters of advanced manufacturing technology. Not only is this advanced manufacturing technology bringing significant changes and improvements to production systems and service, but it is bringing about the complete re-thinking of new business models based on IIoT, the digital twin, and factory/supply chain ecosystems.
This workshop is sponsored by Stratus Technologies.
Join industry expert, Craig Resnick of ARC Advisory Group, and John Fryer of Stratus Technologies, for straight talk on industrial automation and manufacturers' biggest nemesis, unscheduled downtime. This session will deliver need-to-know guidance on "must haves" for OT leaders looking to maximize the ROI of their automation systems by eliminating any unscheduled downtime. Learn to assess availability readiness of your automation system, as well as best practices to engage with IT decision makers. Gain appreciation of how IT and OT convergence can align to deploy the best solution for you through technologies such as virtualization. Understand how to take complex automation systems and simplify their deployment while creating a future ready environment.
Network and endpoint security solutions have become commonplace in industrial control systems. PC-based devices are generally protected with anti-malware software and networks are routinely protected with conventional firewalls. Adoption of advanced solutions like application whitelisting and deep packet inspection (DPI) firewalls is also growing as companies develop the resources to manage these technologies.
Despite these efforts, cyber intrusions remain a serious concern for industrial companies. Incidents like the recent Ukranian Power System outage demonstrate that these defenses are inadequate to block sophisticated attacks. So, what more can companies do and how are suppliers addressing these challenges?
This session will provide an opportunity for attendees to discuss these issues with a panel of experts from leading automation suppliers and cybersecurity solution providers. They will share their views of what they see as the gaps in current solutions and how they are planning to address these challenges. This exchange of views will provide valuable insight for owner/operator security strategy development and cybersecurity solution provider product roadmaps.
In today's business environment, console operators have more control loops than ever to manage, while at the same time both processes and control systems are becoming increasingly more complex. There is increased emphasis to train field and console operators to handle abnormal situations. Staffed largely with aging work forces, with many experienced workers getting ready to retire, companies need to ensure that they can continue to operate their plants in a safe, reliable, and profitable manner. Training approaches that incorporate operator training simulation systems (OTS), immersive training simulators (ITS), gaming, 3D visualization, immersive virtual reality, avatars, and other methods are being used to train the new tech savvy generation of workers and retrain experienced workers. OTS, ITS, virtual reality, and industrial gaming are used for training operators, field personnel, engineers, and plant managers especially for industries with hazardous process units. Human factors engineering is one of the best ways to evaluate and understand how people work best. Immersive technologies and human centered design will shape the future of engineering and user tools. Operator and immersive training simulators will be emphasized.
This session will include presentations and workshops that illustrate technologies, tools, and methodologies being used to evaluate and design for human factors, to train and develop today's workers, and to understand how to improve people performance. ARC will provide all attendees of this session with a copy of an ARC Strategy Report on Operator Training Simulators that was based on a recent survey.
Online communities are no longer relegated to social networking. Today, online communities are being leveraged by industrial operations where environments are created for users to share data, analytical models, simulations, and more. Distributed cloud platforms are being used to disseminate the artifacts, knowledge, tools, and techniques born from the work of the digital manufacturing community.
The rapid access to knowledge will enable more manufacturers to evaluate the use of advanced analytics to improve manufacturing operations. However, there is a skill gap in manufacturing facilities today in terms of big data analysis. Analyzing big data requires the skills of data scientists to extract the underlying trends that would enable manufacturers to improve operational performance.
This session will explore the outsourcing strategies as well as skill building that manufactures have employed to leverage "big data".
Manufacturing operations culture, alarming methodologies, process safety management practices, standard operating procedures, and automated control strategies must work in harmony to prevent abnormal performance. As the issue becomes more and more dependent on human and machine integration, new technologies and implementation techniques like advanced procedural automation can be applied, which will greatly affect operational performance. Those who ignore these new advances in computer enabled manual and automated procedural automation will delay their adoption, and incur highly levels of process safety and productivity risk.
How the world has changed:
New solution technologies for this problem are beginning to emerge, but there is little consensus yet as to how to apply them. So what is next?
Enter the mobile device and IIOT paradigm with wireless connectivity. Smart phones and tablets are replacing the paper systems of the past. Instead of an operator carrying the “little black book” containing user prompts, operational set points by mode or key decision criteria, all of this “decision making” information is carry-in mobile memory or is readily accessible through remote and secure network servers.
Based on these new technologies, for the first time one has the opportunity to unify to distinct islands of information, the manual procedure (SOP) and the automated control strategy (computer code). Now it is possible to deliver complex manual/written procedures in the field and interlock their completed manual actions with automated control actions.
Analytics is the key to implementing data driven decision making and tapping the business transformation possibilities enabled by connected and smart devices, the Internet of Things. However, getting started with analytics has proved exceedingly challenging for many organizations. It can be hard to determine in advance what technologies, skills, and resources you may need.
In this session, we'll hear from organizations well into their analytics journey. They'll review lessons learned and how they designed best practices to overcome cultural obstacles to implement and grow their analytics capabilities. Discussions will focus on how to best implement and leverage analytics, including:
This session will discuss manufacturers' biggest nemesis- unscheduled downtime - and strategies for how to reduce or eliminate it, subsequently increasing a plants key performance indicators (KPIs).
This session will deliver case studies offering need-to-know guidance on “must haves” for OT leaders looking to maximize the ROI of their automation systems by eliminating any unscheduled downtime.
Presentations will focus on learning to assess availability readiness of automation systems, as well as best practices to engage with IT decision makers. Also, to understand how IT and OT convergence can align to deploy the best solution - one that fits into existing systems, supports standards including OPC, and delivers ROI, while laying the foundation to support modern technologies, such as virtualization and IIoT.
The session will cover OT business drivers, including simplicity, TCO, and avoiding unscheduled downtime; the best of both worlds for OT/IT convergence, such as best practices to engage with IT; and support for modern technologies, including IIoT, virtualization, and cloud.
Smart field devices, systems, and associated digital networks continue to support every aspect of the process industries. While the various digital field technologies are based on standards and provide far more functionality than conventional analog communication, we continue to see relatively slow adoption, particularly in brownfield situations. Smart field devices can provide greater operational visibility, agility, and flexibility when leveraged effectively.
On the smart device side, the available technology goes beyond the basic measurements of pressure, temperature, flow, and level, to include multiphase flow, multi-variable transmitters, video, acoustic, fiber optic, and analytical measurements. Not only do these new, smart devices and associated digital communication networks provide the opportunity to obtain additional real-time process and asset intelligence, they also reduce the number of process penetrations required. With the emergence of edge analytics we are increasingly seeing sensors being embedded with more storage, communications, analytics and greater processing power than ever before as smart field devices are the "tip of the spear" in enabling IIoT.
In its purest form, the discipline of process control applies control theory to design systems that produce desired behaviors. However, changes in automation technologies have added considerable distractions over time, while new technologies have helped demystify some of the traditional work.
Technology has both complicated process control, and made it easier. Technology has taken tasks that previously required a lot of expertise and embedded that expertise within automation products. The Industrial Internet of Things (IIoT) allows some expertise to reside off-site, providing additional value.
While most process control organizations have adapted to technology complication, few have stepped back to rethink the skillsets and assignments in the greater context of today's more digitized and connected world.
This session explores ways companies have responded to the changes in technology, skillsets, and demographics.
The distribution grid is a focal point of modernization of the electric utility industry. New energy technologies are being added at the grid edge at an unprecedented rate — microgrids, rooftop solar, electric vehicles, battery energy storage, and more — with consumers, not utilities, increasingly in control of the pace of adoption. New economic and operational models, such as transactive energy, are being considered and implemented across the globe.
To support these new requirements, many utilities are harnessing the Internet of Things to build a Grid of Things. This modern electricity platform is spring boarding utilities' capacity to adapt to a changing market while also providing new and higher levels of value for customers. Yet, it's not easy. The Grid of Things requires alignment of consumer and operational processes, supported by a complex web of interconnected, interoperable, and intelligent systems, equipment, and field devices.
This session explores the key components needed in a Grid of Things, including improved visibility, communications, analytics, security, and operating architecture, and how to achieve them. Best practices and lessons learned will be shared by those directly tasked with building and supporting the modern Grid of Things.
Technology is changing and fast. Labor availability and skillsets are changing as well. Process control personnel makeup and skillsets have evolved over decades of iterations, but the real question is, "If you started from scratch, how would you divvy up the responsibilities?"
This session will focus on the changing responsibilities and skill sets in the OT space and discuss strategies to address these challenges.
Cvent Online Event Registration Software | Copyright © 2000-2017 Cvent, Inc. All rights reserved.