User Manual

1
About This Document
10
Siemens Application Note
Smart Infrastructure
1.3 Acknowledgements
Responsibility of the System Owner
The information technology (IT) used on site is the responsibility of the system
owner.
Standards, Regulations and Legislation
Follow the policies of your company as well as any national regulations or
international standards, such as ISO/IEC 27002 and IEC62443.
The Federal Office for Cyber Security (BSI) www.bsi.bund.de/EN provides
information on basic Cyber Security for Germany in both German and English, for
example.
Product Security Guidelines
The security guidelines in this document provide the system owner with additional
specifications – alongside basic IT protection– for operating a corresponding
system. These additional specifications are valid at the time of publication.
Cyber Security Disclaimer
Siemens provides a portfolio of products, solutions, systems and services that
includes security functions that support the secure operation of plants, systems,
machines and networks. In the field of Smart Infrastructure, this includes building
automation and control, fire safety, security management as well as physical
security systems.
In order to protect plants, systems, machines and networks against cyber threats, it
is necessary to implement – and continuously maintain – a holistic, state-of-the-art
security concept. Siemens’ portfolio only forms one element of such a concept.
You are responsible for preventing unauthorized access to your plants, systems,
machines and networks which should only be connected to an enterprise network
or the internet if and to the extent such a connection is necessary and only when
appropriate security measures (e.g. firewalls and/or network segmentation) are in
place. Additionally, Siemens’ guidance on appropriate security measures should be
taken into account.
For additional information, please contact your Siemens sales representative or
visit
https://www.siemens.com/global/en/home/company/topic-areas/future-of-
manufacturing/industrial-security.html
Siemens’ portfolio undergoes continuous development to make it more secure.
Siemens strongly recommends that updates are applied as soon as they are
available and that the latest versions are used. Use of versions that are no longer
supported, and failure to apply the latest updates may increase your exposure to
cyber threats. Siemens strongly recommends to comply with security advisories on
the latest security threats, patches and other related measures, published, among
others, under
http://www.siemens.com/cert/en/cert-security-advisories.htm