The currently over-hyped tagline is “Internet of Things”, however Automation and Control Systems have been with us for a while. These systems have also required interconnection for quite some time as well, but only recently has there been a requirement to connect to a public or private a cloud service. Previously, they were fairly invisible, completely isolated, and residing on their own self-contained networks. Now requiring internet access, they are becoming highly visible.
The crossover from self-contained to converged for these systems is creating some headaches for Network Managers. Depending on the density, subnet and network design plans must expand to include them. There is also a potential security headache to ensure while they share some resources with the core network, they remain isolated. Usually third party contractors have been engaged to maintain and monitor the systems under control, and third parties may need remote access to monitor, adjust or maintain. This access needs to be strictly controlled to prevent crossover between different systems and the vendors who manage them.
Securing Building Control Systems
A good network design will manage all of these problems. It will maintain separation between the systems, while still providing them with internet access, and protecting them from unauthorized, outside access. This network design will quickly quarantine and notify of any new additions so that they may be validated, authorized, documented and placed in the appropriate network security container. Vendors will have remote access, but only to the systems they are responsible for, and their access managed centrally. All interaction and communication with the systems will be monitored, inspected and logged.
It sounds complex, but with current network technology and management tools, it’s not difficult to do. If you have a similar challenge in front of you, and you would like to know more, please contact us for a quick discussion. We would be more than happy to help you deal with this new challenge.
