In the current and future cyber threat landscape, it is essential for one to be up-to-date with various tools and technologies available in the industry for mitigating the business risks related to cyber security. While ICS Asset Owners and Custodians operating and maintaining their control systems with primary focus on reliability and availability, they are not necessarily aware about off-the-shelf cyber security solutions already available from both OEMs and third party vendors specific to ICS cyber security. These security solutions can be deployed in OT/ICS environment towards protection of confidentiality, integrity and availability of mission-critical infrastructure and enhance the overall cyber resilience posture of an Organization towards digital transformation readiness for Industry 4.0. This presentation attempts to provide an overview of some of those value added solutions mapped to ICS CERT Framework (Identify-Protect-Detect-Respond-Recover) as well as ICS Purdue Model Network Levels (i.e. OT, IIoT and converged IT-OT scenario) as a ready reference for OT/ICS Teams for considering in the strategic roadmap.

Jagannadh V. R. Vadlamani (Author/Presenter)

Senior Information Security Analyst (OT)

ADNOC Offshore

With two decades of diversified experience in implementing Digital Technology projects and solutions in the Energy sector, Jagannadh Vadlamani has expertise in strategy, governance, risk and compliance management programs for Industrial IT/OT/IACS/Cyber Security. In his current role, Jagannadh works focus on the strategic design and implementation of Cyber Security Management System (CSMS) for Company OT/ICS.

Jagannadh received Bachelor’s and Master’s degrees from BITS Pilani, India in Information and Software Systems, and holds ISO Lead Auditor, CISM, PMP, Six Sigma Greenbelt and several technology certifications.

Razdan Khan (Presenter)

Information Security Analyst

ADNOC Offshore

Razdan Khan is a seasoned Cyber Security professional with 15 years of experience having significant exposure in the implementation of Cybersecurity projects and operations lifecycle for the Oil & Gas industry.
In his current role, Razdan is leading the Cyber Security initiatives with a focus on Security Architecture, SOC, Risk and Compliance Management functions for the ADNOC Offshore IT department.
Razdan majored in Electronics & Telecommunications Engineering and has several technology certifications including CISSP, SANS GICSP, GCWN, CISM, CISA, CEH, ISO27001 LA/LI, Azure & Blockchain Certifications.

ICS architectures have significantly evolved over the last two decades. The current operational set-up and the management demands that the once isolated ICS now be integrated to allow the visibility of facility status and manage the facility as the part of complete enterprise. In addition, last decade witnessed developments in mobile/ internet technologies enabling significant increase in the data driven architectures/ solutions inclusive of IIOT- industrial internet of things. In industrial enterprises, though there are multiple of motivation factors for implementing IIOT and related technologies, these very solutions open up new vectors for cyber-attacks. It is therefore essential that for IIOT and related technologies to be successful the ICS cybersecurity aspects are vitally addressed. The strategy of implementing cybersecurity begins with identifying the ICS in terms of effective number of zones/ conduits, identifying threats and the corresponding risks, and deploying defence in depth architectures. This presentation captures the various motivations in using IIOT and related technologies as the part of ICS in industrial applications and then identify the framework for the effective implementation of ICS cybersecurity.

Vinod Pal Singh (Author/Presenter)

Senior Control Engineer

ADNOC Onshore

Senior Control Engineer in TC-Engineering department of ADNOC Onshore. Bachelor's in I&C Engineering with 20 years cumulative experience in Instrumentation & Control Engineering of Upstream Oil & Gas facilities. TUV Rheinland certified FS Expert (SIS).

Syed Asif Ahmed (Author/Presenter)

Engineer, Maintenance (Icss)

ADNOC Onshore

Graduate Electronics & Instrumentation Engineer with around 18 years experience spanning chemical and upstream oil & gas industry. Currently with ADNOC Onshore South East Asset SQM Maintenance team. Assigned roles included engineering, commissioning and maintenance of instrumentation and control/ safety system. Certified Professional MCSE and experience in SAP 4.7EE Technical Consultant Basis ABAP and LSM Workbench. Worked in ICS cyber security projects and Lead field data integration project.

ICS architectures have significantly evolved over the last two decades. The current operational set-up and the management demands that the once isolated ICS now be integrated to allow the visibility of facility status and manage the facility as the part of complete enterprise. In addition, last decade witnessed developments in mobile/ internet technologies enabling significant increase in the data driven architectures/ solutions inclusive of IIOT- industrial internet of things. In industrial enterprises, though there are multiple of motivation factors for implementing IIOT and related technologies, these very solutions open up new vectors for cyber-attacks. It is therefore essential that for IIOT and related technologies to be successful the ICS cybersecurity aspects are vitally addressed. The strategy of implementing cybersecurity begins with identifying the ICS in terms of effective number of zones/ conduits, identifying threats and the corresponding risks, and deploying defence in depth architectures. This presentation captures the various motivations in using IIOT and related technologies as the part of ICS in industrial applications and then identify the framework for the effective implementation of ICS cybersecurity.

Vinod Pal Singh (Author/Presenter)

Senior Control Engineer

ADNOC Onshore

Senior Control Engineer in TC-Engineering department of ADNOC Onshore. Bachelor's in I&C Engineering with 20 years cumulative experience in Instrumentation & Control Engineering of Upstream Oil & Gas facilities. TUV Rheinland certified FS Expert (SIS).

Syed Asif Ahmed (Author/Presenter)

Engineer, Maintenance (Icss)

ADNOC Onshore

Graduate Electronics & Instrumentation Engineer with around 18 years experience spanning chemical and upstream oil & gas industry. Currently with ADNOC Onshore South East Asset SQM Maintenance team. Assigned roles included engineering, commissioning and maintenance of instrumentation and control/ safety system. Certified Professional MCSE and experience in SAP 4.7EE Technical Consultant Basis ABAP and LSM Workbench. Worked in ICS cyber security projects and Lead field data integration project.

It is very important in the Middle-East region to be ahead of our competition in multiple domain, especially in industry. For example, being able to produce a cleaner, safer energy more efficiently is the biggest challenge for the Oil & Gas industry. The digital transformation and the Industry 4.0 revolution is here to address this challenge and sooner or later, everyone will need to adopt it. Let's talk about the digital transformation cybersecurity aspect which is a fundamental pillar and the first step for a safe and efficient journey toward industry 4.0 We will also talk about the challenges that we can face and how to address it in details. We will also discover how the cybersecurity elements of the digital transformation journey can create the basis of the IT/OT convergence in order to leverage technologies from the IT network and include OT networks in the perimeter without compromising the plant operation safety.

Jean Baptiste (Author/Presenter)

Technical Sales Consultant

Schneider Electric

Sales lead of Schneider-Electric cybersecurity business in the Middle-East with high technical experience designing, implementing and managing security infrastructures for various industries. Holds a multitude of industrial cybersecurity certifications.

The convergence of IT/OT and IIoT drive industries to adopt cybersecurity practices to ensure system reliability/safety. Organizations with systems components using older OS are vulnerable, which is easier for attackers to exploit .cybersecurity controls are required to protect against these threats, but some industries have challenges regarding these controls. IT/OT in traditional industrial environments are usually operated each with its own network, industrial environment is also filled with tools/devices that weren’t designed to be connected to a corporate network. So, these devices need proper security protection and visibility. Isolated environments (without internet access) were relatively secure, but it cannot be said safe. Attacks still target smart factories and critical infrastructure facilities, Where numerous devices that have limitations to internet connectivity and the ability to install security solutions. Providing security solutions for these types of devices requires an innovative approach. TXOne Networks addresses the growing demand for security in the industrial sector. Covering the IT/OT layers, providing active, immediate, and easy to build solutions to protect Industrial Control System environments.

Mahmoud Salman (Presenter)

Cyber Security Solutions Consultant

Trend Micro

Mahmoud Salman is a Cyber Security Solutions Consultant at Trend Micro. He Holds a B.S degree in Computer Science from Princess Sumaya University for Technology in Jordan 2005. Mahmoud Has 11 Years’ Experience in Information Security holding a CISSP certificate , Mahmoud has an experience in security architecture design and implementation for variety of security solutions. He attended many OT workshops the last one in August 2019 in Tokyo Japan with Moxa and Trend Micro OT team , Discussing the OT security threats and Security solutions to protect OT environments

In Cyber security no single measure is sufficient by itself for the evolving Challenges faced in the industrial automation cybersecurity community. Progressive adoption of operational technology (OT) is expanding the use cases requiring protection. Lack of visibility is undermining the effectiveness of established defenses. Weak boundaries between information technology (IT), Operational technology (OT) and Internet-of-Things (IoT) are increasing the need for more integrated and effective cybersecurity solutions

Mohammed Nabeel (Author/Presenter)

Sr Solution Architect

Yokogawa Middle East & Africa B.S.C.(c)

Mr. Mohammed Nabeel is the Sr Cyber Security Solution Consultant at Yokogawa Middle East & Africa (Bahrain). He holds a Master Degree from Noorul Islam University and has over 15 years of experience in the field of, Security and Networking Infrastructure solution implementation and consulting. His Area of expertise is Consulting on latest Cyber security Solutions, Network infrastructure design and assessing network vulnerabilities.

Endpoint protection for industrial assets has traditionally suffered from imperfect application of IT security techniques, instead of purpose-built OT capabilities. Bayshore Networks will present a case study about how a working wastewater treatment plant was protected in one working week (5 days) using the Bayshore SCADAfuse automated industrial endpoint firewall. Key points covered will include how to build customized protection policies; how to integrate the solutions into existing OT reporting and management schemes via SCADA HMI; and how to enable existing people and skills into the program without having a dependency on finding and hiring new staff with rare and expensive ICS security analysis skillsets.

Dr. Vincent Turmel (Author/Presenter)

Vice President

Bayshore Networks

Dr. Vincent Turmel is Bayshore’s VP of Field Engineering. He has over 20 years’ experience in process automation and cybersecurity. He has been with Bayshore since 2016 and was previously with Siemens Industry Inc. where he held roles in application engineering, product management and consulting in industrial automation and ICS security. During this time Vincent advised major corporations on automation, control systems architecture and security.

While preparing for our ISO 27001 compliance audit after 6 months of our 2 MTPA Alumina Refinery operations in Abu Dhabi, we decided to take stock of current controls for our Operational Technology (Automation (DCS) and Manufacturing IT) network. We started our Al Taweelah Alumina refinery project in 2015, with design guidelines in sync with ISA SP99/IEC 62443 for our Process Control and Information Systems (PCIS). Our suite of solutions started with- L1/2 :DCS controls, PLCs and Safety Systems. L3: OTS, APC, Alarm Management, IAMS, Wireless L3.5: Industry 4.0 aligned solutions like PIMS, LIMS etc… delivering a range of applications and use cases. Enablers: Analytics, RPA, Remote Access. With over 300 users ranging from CCR operators, engineers, licensors, suppliers, management staff,..– maintaining, managing and securing our OT domain started becoming a Herculean task. As part of our ISO27001 compliance audit, we realized that our approach is very reactive and we discussed opportunity to re-use solutions available in the IT world and adapt to our OT world. By tailoring commercial solutions to meet our use cases, we are aiming to realise the following benefits: -Compliance to network management best practices -Adoption of IEC 62443 and NIST SP 800-82 -Improve availability by continuous monitoring and taking preventive actions -Just in time reporting and alerting thereby reducing response time for corrective actions -ISO27001 audit compliance for user management

Holger Grotheer (Presenter)

DCS Manager

Emirates Global Aluminium

Holger Grotheer
Manager – DCS, Emirates Global Aluminium
Holger has worked for supplier like Siemens and operating companies like Aurubis (Germany), Aluminium Oxid Stade (Germany) and EGA.
He has a total of 31 years of experience – 2 years with Siemens and 29 years with operating companies. 19 years as Instrumentation and DCS department leader.
Holger’s expertise is across the entire process automation landscape including field-instrumentation in the implementation and operation of traditional solutions like DCS, PLC and ESD.

Giovanni Djotiko (Presenter)

DCS Safety Systems & System Maintenance Engineer

Emirates Global Aluminium

Giovanni has worked in Industrial Automation for more than 9 years. He previously worked for Honeywell Process Solutions providing site support services for Alcoa Alumina Refineries. In his current role as DCS Safety Systems & System Maintenance Engineer at Emirates Global Aluminium (EGA), he is engaged in refinery DCS, PLC, PIMS (MES) & Safety Systems.
With a academic background in Electrical Power Engineering, Giovanni's expertise also includes LIMS, Weighbridge, Virtualization and Microsoft solutions and applications.
Giovanni has a passion for Volunteering and plays Football and Volleyball in his spare time.

Karthik Sitaraman (Author)

Senior Manager - DCS and PIMS

Emirates Global Aluminium

Karthik has worked for suppliers like Honeywell, Invensys and operating companies like QAFCO and EGA. Karthik has a total of 26 years of experience - 13 years with suppliers working in a wide range of roles involving project, program and operations management; 13 years heading up the OT projects and operations for a fertilizer complex QAFCO, Qatar and Alumina refinery at EGA, UAE. Karthik’s expertise is across the entire process automation landscape in the implementation and operation of traditional solutions like DCS, PLCs, ESD, MES, OTS, APC, Alarm Management, Asset Management, and emerging solutions like Industry 4.0, cybersecurity, edge computing and IIoT applications. Karthik has the ability to view projects from customer and vendor perspectives, thereby managing and mitigating project and operational risks.

While preparing for our ISO 27001 compliance audit after 6 months of our 2 MTPA Alumina Refinery operations in Abu Dhabi, we decided to take stock of current controls for our Operational Technology (Automation (DCS) and Manufacturing IT) network. We started our Al Taweelah Alumina refinery project in 2015, with design guidelines in sync with ISA SP99/IEC 62443 for our Process Control and Information Systems (PCIS). Our suite of solutions started with- L1/2 :DCS controls, PLCs and Safety Systems. L3: OTS, APC, Alarm Management, IAMS, Wireless L3.5: Industry 4.0 aligned solutions like PIMS, LIMS etc… delivering a range of applications and use cases. Enablers: Analytics, RPA, Remote Access. With over 300 users ranging from CCR operators, engineers, licensors, suppliers, management staff,..– maintaining, managing and securing our OT domain started becoming a Herculean task. As part of our ISO27001 compliance audit, we realized that our approach is very reactive and we discussed opportunity to re-use solutions available in the IT world and adapt to our OT world. By tailoring commercial solutions to meet our use cases, we are aiming to realise the following benefits: -Compliance to network management best practices -Adoption of IEC 62443 and NIST SP 800-82 -Improve availability by continuous monitoring and taking preventive actions -Just in time reporting and alerting thereby reducing response time for corrective actions -ISO27001 audit compliance for user management

Holger Grotheer (Presenter)

DCS Manager

Emirates Global Aluminium

Holger Grotheer
Manager – DCS, Emirates Global Aluminium
Holger has worked for supplier like Siemens and operating companies like Aurubis (Germany), Aluminium Oxid Stade (Germany) and EGA.
He has a total of 31 years of experience – 2 years with Siemens and 29 years with operating companies. 19 years as Instrumentation and DCS department leader.
Holger’s expertise is across the entire process automation landscape including field-instrumentation in the implementation and operation of traditional solutions like DCS, PLC and ESD.

Giovanni Djotiko (Presenter)

DCS Safety Systems & System Maintenance Engineer

Emirates Global Aluminium

Giovanni has worked in Industrial Automation for more than 9 years. He previously worked for Honeywell Process Solutions providing site support services for Alcoa Alumina Refineries. In his current role as DCS Safety Systems & System Maintenance Engineer at Emirates Global Aluminium (EGA), he is engaged in refinery DCS, PLC, PIMS (MES) & Safety Systems.
With a academic background in Electrical Power Engineering, Giovanni's expertise also includes LIMS, Weighbridge, Virtualization and Microsoft solutions and applications.
Giovanni has a passion for Volunteering and plays Football and Volleyball in his spare time.

Karthik Sitaraman (Author)

Senior Manager - DCS and PIMS

Emirates Global Aluminium

Karthik has worked for suppliers like Honeywell, Invensys and operating companies like QAFCO and EGA. Karthik has a total of 26 years of experience - 13 years with suppliers working in a wide range of roles involving project, program and operations management; 13 years heading up the OT projects and operations for a fertilizer complex QAFCO, Qatar and Alumina refinery at EGA, UAE. Karthik’s expertise is across the entire process automation landscape in the implementation and operation of traditional solutions like DCS, PLCs, ESD, MES, OTS, APC, Alarm Management, Asset Management, and emerging solutions like Industry 4.0, cybersecurity, edge computing and IIoT applications. Karthik has the ability to view projects from customer and vendor perspectives, thereby managing and mitigating project and operational risks.

The goal of this presentation is to explain the challenges and the lessons learned when implementing the zones & conduits concept from IEC 62443-3-3 within two different Oil & Gas Companies. In the first case, the project was the replication of OSI PI between Plant and Corporate IT networks. The plant OSI PI collective was very large: 250,000 tags and up to 50,000 tag value updates per second. The replication was complex because of the one-way requirement excluded the standard OSI solution. Moreover, tags were created and destroyed in dynamically, and needed to be replicated in real-time taking into account a possible fault of the PI Primary server. This is created a major challenge which was solved through innovative setup. In the second case was a Honeywell PHD Historian replication between an off-shore oil production site and the Corporate IT LAN. In this case the integrator was unfamiliar with the unidirectional technology and designed a file transfer based solution. At one point 700,000 files were transfer though the Data Diode to the on shore network. This created another major challenge which was solved through a simple custom developed software to compress and reduce dramatically the number/size of the files.

Gilles Loridon (Author/Presenter)

CEO

Global Security Network

IISA / IEC 62443 Cybersecurity Fundamentals Specialist

ISA

Gilles LORIDON has worked as an IT Consultant for twenty-four years and as InfoSec Consultant for more than nineteen years. Since 1999, Gilles is the position of CEO of Global Security Network. Gilles has been leading and implementing successful InfoSec projects for Security Agencies, Military Departments, Oil & Gas companies and International corporations in Europe, Africa, as well as in the Middle East. Gilles has been conducting InfoSec Audits & VA/PT, ISO/ISF/ADISC ISMS implementations and Awareness Training in the Energy, Finance and Governmental sectors. Gilles is certified ISA/IEC 62443 Cyber Security Fundamentals Specialist.

TBC

Ikshvakoo Vaid (Author/Presenter)

Digital Lead - IMEA Hub Region

ABB

As a student member of ISA during his graduate school days, Ikshvakoo did not know that he would be invited as a guest speaker to ISA UAE Safety & Cybersecurity Symposium. In his 17 years journey from being student member to this symposium, Ikshvakoo has played multiple roles with ABB serving energy industries across APAC and IMEA markets with automation solutions. Currently, as Hub Digital Lead for IMEA, Ikshvakoo focuses on IACS security and Industry 4.0 applications.

Don’t become tomorrow’s headline. IT security vulnerabilities can be found in almost any kind of automation system. Protect your industrial plant with the latest strategies for aligning safety and security. Learn about recommendations from the IEC for simultaneously applying Functional Safety (IEC 61508) and IT Security (IEC 62443) standards. A generic strategy on how to align both standards simultaneously will be introduced. How to handle risk management as well as how to cope with the different lifecycles will be presented. The Zone and conduit concept of IEC 62443 will be discussed. Different configurations of the SIS implementation will be introduced and discussed given the security impact on functional safety. In particular: • Takeaways from recent safety-relevant security incidents in industrial plants demonstrate the need for specific IT security improvements • A strategy of handling updates and upgrades of SIS • A strategy on how to protect information transfer between SIS and DCS • Protection of real-time data connection between SIS and DCS • A strategy on how to protect the field device running digital communication protocols Will be introduced and their impact on safety and security will be discussed.

Thomas Koenigstein (Author/Presenter)

Consultant and Trainer

HIMA

Thomas Königstein, is Consultant and Trainer for Automation Security.
He studied Information Technology in Germany and started his career in the area of Digital/IT Forensic Seventeen years ago. During his career, he worked as a Freelancer and CISO (Chief Information Security Officer) and worked on projects related to Information Security Management System (ISO 27001), Risk Assessment, Penetration Testing and others. As a licensed trainer in HIMA, he provides a TÜV Rheinland-approved training on Cybersecurity. With ten years of experience in Cybersecurity and Forensic Cybersecurity, he is the Cybersecurity expert of HIMA.

Industrial Control Systems have moved from proprietary to industry standard IT systems (PC’s, Microsoft Operating Systems, TCP/IP, IT firewalls, etc.) generally found on the traditional IT network with some additional customization by the vendor. Use of IT tools and tactics to compromise ICS networks are becoming common with the IT network used as an avenue to reach the ICS network. In these times, protecting your critical environment from new and emerging threats requires fine tuning the ICS Cyber Security Assessment for a more holistic approach.

Shoukath Ali (Author/Presenter)

Security Risk & Compliance Expert

Independent Consultant

Cyber security professional with vast experience implementing security controls in IT and OT networks for various business sectors. Career roles have spanned from IT operations to digital forensics and was responsible for managing cyber security for a large global organisation with a mix of manufacturing, sales and R&D offices as their APAC Regional CISO. Certifications like CISSP, CRISC, CISM, CISA, SANS Incident Handler (GCIH) & Forensic Analyst (GCFA) achieved during a career of more than 25 years have helped to develop a better understanding of the security requirements to effectively contribute towards securing the organization.

OT cybersecurity industry professionals have spent countless hours debating the merits of various intrusion detection and intrusion prevention technologies. While IDS and IPS are important, companies must assume that their systems will be breached and develop plans on how they will respond to reduce the impact. While intrusion protection systems (IPS) and intrusion detection systems (IDS) can provide some visibility into ICS assets, the view provided by network detection tools is limited at best. If your OT cybersecurity strategy conversations today are focused on the minutia of the effectiveness of various network-based detection technologies, it’s time to change the conversation. It’s time to talk about protecting OT assets within the broader framework of OT asset mgmt. OT asset mgmt. includes inventory management, configuration management, vulnerability management, and the detection of unauthorized changes. OT asset management provides much deeper visibility into industrial assets – all the way down to the field instrument and control strategy level – without the risk associated with active polling of the devices. OT asset mgmt is also able to deliver the depth of information that cybersecurity professionals, as well as control system engineers, need to secure ICS assets effectively and respond to an attack. This includes information such as control strategies and authorized versus unauthorized changes that IPS and IDS tools simply cannot provide.

Syed Belal (Presenter)

Cybersecurity Technical Sales Consultant

PAS Global LLC.

Syed Belal is an ICS cybersecurity professional with 12+ years of experience in Industrial Control System and operational technology applications. He joined PAS in 2017, after a 9-year tenure at Schneider Electric as an ICS/OT Cybersecurity Lead Consultant. Throughout his career, he has designed and implemented some of the Middle East's largest and most sophisticated Industrial Control systems.

Syed has a BSc.EE from the American University of Sharjah in UAE and an MBA in Business Strategy from the University of Strathclyde in the UK. He holds a multitude of industry certifications including CISSP, and ISA/IEC-62443 Cybersecurity Specialist.

The supply chain, along with the OEMs, plays a crucial role in meeting the cybersecurity risk management objectives for any asset owner/ operator. Are we prepared to maximize value from this strategic relationship? Learn how by attending this presentation to find out: - how to develop cybersecurity requirements specifications for IACS for inclusion in strategic projects; - how to position internal engineering, O&M and audit processes for onboarding cybersecurity controls in collaboration with external parties; - why prequalifying technology solutions working with the IACS OEMs is vital to the sustainability of cybersecurity controls; and - where to obtain expert insight and support for meeting organizational cyber risk management objectives.

Tahir Saleem (Author/Presenter)

Sr. Specialist

Dubai Electricity and Water Authority (DEWA)

Over 15 years of professional experience within IACS security practicing security strategy development, technical design & engineering, operations, commissioning, and maintenance for providers of vital services covering: power & water, mining, transport (rail), oil & gas and Government services.