Integrating Plant Floor and IT Security Strategies and Technologies

1
Integrating Plant Floor and IT Security
Strategies and Technologies

• Jim Bauhs

2

•  Jim Bauhs
• 25 years experience in the IT industry.
• Information Protection Manager for Cargill Plant
  Operations
• Chair of Microsoft Manufacturing Users Group
• Co-Chair of Center for Information Protection at
  Iowa State Univ
• Cargill is an international provider of food,
  agricultural and risk management products and
  services. With 149,000 employees in 63 countries,
  the company is committed to using its knowledge
  and experience to collaborate with customers to
  help them succeed.

3
Abstract

• Commercial information technology has had a major
  impact on the security of the plant floor. This
  session looks at how these technologies and their
  deployments are evolving to be more in line with
  control system security and operational needs

• With the increasing use of common technologies we
  face a choice of . . . . collision and
  conflict . . . or . . . convergence
  and collaboration.

4
Problem Statement

• "With the growing adoption of common technologies
  for operating the plant floor and their
  increasing integration with business systems . .
  . . security is becoming an even greater
  concern. 

Complexity
Overlap
Trust
Dependence
People
5
Polling

• Who has this problem solved?

- or -
New Speaker comes to the Podium
6
Agenda

• Evolution of Plant Technology
• Opportunity Statement
• Considerations
• Perspective
• Recommendations
• System Security in the Plant
• MsMUG Microsoft Manufacturing Users Group
• CIP Center for Information Protection

7
Evolution of Plant Technology

• Originated as proprietary, isolated, unique,
  solutions
• Developed, installed, operated and maintained by
  local operations staff
• Gradual replacement of proprietary with common
  technologies
• Greater dependency on technology for operations
• Integration with other systems via Intranet
  Internet

8
Opportunity Statement

• Plants are using common technology
• Plants are facing common issues/challenges
• Complexity and dependence on technology continues
  to increase
• Threats to technology are increasing
• IT has increasing accountability for technology
• RISK is increasing
• Opportunity exists to help Business reduce risk

9
Considerations

• Plants Offices are very similar but . . .
• Different Service Levels
• Different Schedules
• Different Priorities/Perspectives
• Trust must be developed and nurtured
• Focus and partnership is key
• Identification of what each party can deliver
• Limiting scope to what you can be successful at

10
Perspective
IT
11
Perspective
Plant
12
Recommendations

• Common processes for common technologies executed
  in a common way
• Focus on Infrastructure components
• Network WAN (YES) LAN (Future) End node (?)
• Server Hardware, OS, vulnerabilities patches
• Client hardware, OS, vulnerabilities patches
• Anti-virus
• Have each group focus on what they are best at

This is NOT just a Technology issue but
includes People Behaviors
13
System Security in the Plant

• Policies are the SAME
• Risks are COMMON
• Objectives are the SAME
• Environments are DIFFERENT
• Implementations are DIFFERENT
• Awareness is CRITICAL
• IT and Plant are

CONVERGING
COLLABORATING
COOPERATING
14
Cargill

• Plant IT Past
• Plant IT Present
• Plant IT Future

15
MsMUG

• Formed in 1999 to address issues that arise when
  applying Microsoft technology in manufacturing.
• Our mission is to define and resolve these
  issues, such as version management, system
  integration, maintenance, and supplier
  responsibility.
• To achieve this goal, we seek to develop a set of
  best practices that will aid in the use of
  Microsoft operating systems in manufacturing
  environment provide input to Microsoft on the
  special needs of this environment encourage and
  influence software suppliers to support these
  best practices and provide user input to the OPC
  Foundation on changes and improvements to OPC.
• Additional information available at
• http//www.omac.org/msmug

16

• The Center for Information Protection is a
  National Science Foundation Industry/University
  Cooperative Research Center (I/U CRC).  The
  National Science Foundations I/U CRC program is
  devoted to improving the performance capacity of
  the U.S. industrial enterprise.  Over the past
  two decades, over fifty I/U CRCs have led the way
  with a new era of partnerships between
  universities and industry by producing
  high-quality, industry-relevant, fundamental
  research.
• The Center for Information Protection is one of
  the newest I/U CRC centers and will be the only
  center with a focus on information protection. 
  The CIP is a joint effort between Iowa State
  University, New Jersey Institute of Technology,
  and the SUNY Stony Brook.
• Additional Information is available at
• http//www.iac.iastate.edu/cip/