User Guide

IT Security Notices
1
A6V11979532_en_b
9 | 26
1 IT Security Notices
Responsibility of the System Owner
The information technology (IT) used on site is the responsibility of the system
owner.
Standards, Regulations, and Legislation
Follow the policies of your company as well as any national regulations or
international standards, such as ISO/IEC 27002 and IEC62443.
The Federal Office for Information Security (BSI) provides information on basic
Cybersecurity for Germany in both German and English.
Product Security Guidelines
The security guidelines in this document provide the system owner with additional
specifications – alongside basic IT protection – for operating a corresponding
system. These additional specifications are valid at the time of publication.
Cybersecurity Disclaimer
Siemens provides a portfolio of products, solutions, systems, and services that
includes security functions that support the secure operation of plants, systems,
machines, and networks. In the field of Building Technologies, this includes
building automation and control, fire safety, security management as well as
physical security systems.
In order to protect plants, systems, machines, and networks against cyber threats,
it is necessary to implement – and continuously maintain – a holistic, state-of-the-
art security concept. Siemens’ portfolio only forms one element of such a concept.
You are responsible for preventing unauthorized access to your plants, systems,
machines, and networks, which should only be connected to an enterprise network
or the Internet if and to the extent such a connection is necessary and only when
appropriate security measures (for example, firewalls and/or network
segmentation) are in place. Additionally, Siemens’ guidance on appropriate
security measures should be considered.
For additional information, contact your Siemens sales representative or visit
https://www.siemens.com/global/en/home/company/topic-areas/future-of-
manufacturing/industrial-security.html.
Siemens’ portfolio undergoes continuous development to make it more secure.
Siemens strongly recommends that updates are applied as soon as they are
available and that the latest versions are used. Use of versions that are no longer
supported, and failure to apply the latest updates may increase your exposure to
cyber threats. Siemens strongly recommends complying with security advisories on
the latest security threats, patches and other related measures, published, among
others, under
https://www.siemens.com/cert/en/cert-security-advisories.htm.