SINA for a secure water supply
Measures
An on-call service was set up directly with the installation of the control system and the productive connection of the first automated plants in 2002.
To enable the on-call services to respond quickly, remote dial-in has been set up.
Due to the changing security situation, the existing remote dial-in should be updated, making it more secure and holistic. The new solution was to be more secure and more convenient than the existing remote dial-in. From the beginning, the renewal of the control system focused on a holistic approach to securing the process control technology. The recommendations in the "National Strategy for the Protection of Critical Infrastructures" (KRITIS) of the Federal Ministry of the Interior as well as the white paper "Security in Automation" of the German Association of Energy and Water Industries (BDEW) further deepened the requirements and provided external evidence.
In May 2012, a SINA L3 box was installed in the test network in the development laboratory and connected to either the control system level or the associated automation network. A SINA workstation was used for remote access. The test series were quickly successful. The security strategy implemented was assessed in 2012 by means of the KRITIS site check as an internal measure. The planned implementation of SINA technologies for dial-in and secure remote connections for the control system technology were also considered. It turned out that an improvement in the security standard was achieved in various areas with the new solution. The first productive expansion stage with four SINA L3 boxes and ten SINA Virtual Workstations was then put into operation in May 2013.
Berliner Wasserbetriebe"From our point of view, the SINA technology fulfils all the essential requirements such as the central management function and powerful connection encryption. Furthermore, the recommendation and certification of the solution by the BSI provided legal certainty and thus investment protection with regard to the upcoming requirements from the KRITIS process right from the start."
