The goal of this presentation is to explain the Security Level and the relatively new concepts of standard ISA/IEC 62446 and the Foundational Requirement FR-5 RDF, Restricted Data Flow, which describes the security requirements for OT Component. ISA/IEC 62443 is a large and complex standard, it could be difficult to navigate. To implement the Zones & Conduits approach is the core of Critical Infrastructure Operators strategy to secure their OT and therefore the Security Level Targeted and Achieved of the conduit between Level 3.5 and L4 is paramount to reach the right cyber security protection of the ICS/DCS network against Outsider Threat. This is also the most challenging to implement because of the conflicting requirements between IT and ICS network users. In the first part of the presentation, we will quickly refresh the memory of the audience about the standard ISA/IEC 62443, Security Levels and Zones & Conduits. From the Critical Infrastructure Operators point of view, this is critical to understand to be able to select the proper controls and this is also the newest part of the standard. In the second part of the presentation, we will review cases study regarding the implementation of L3.5/L4 Conduit and how to achieve different SL for FR-5 RDF. Keywords: ICS cybersecurity, IIoT, Data Diode, Firewall

Gilles Loridon (Author/Presenter)

CEO

Global Security Network

Gilles Loridon has worked as an IT Consultant for twenty-four years and as InfoSec Consultant for more than nineteen years. Since 1999, Gilles is the position of CEO of Global Security Network. Gilles has been leading and implementing successful InfoSec projects for Security Agencies, Military Departments, Oil & Gas companies and International corporations in Europe, Africa, as well as in the Middle East. Gilles has been conducting InfoSec Audits & VA/PT, ISO/ISF/ADISC ISMS implementations and Awareness Training in the Energy, Finance and Governmental sectors. Gilles is certified ISA/IEC 62443 Cyber Security Fundamentals Specialist.

With industries expanding and implementing industry 4.0 technologies, cyber-attacks on OT/ICS environments have increased significantly. Understanding industrial control systems vulnerabilities and learning techniques to defend critical infrastructure systems from cyber threats is increasingly important. With the help of real-world use cases, we will present the methodologies and security measures necessary to protect critical infrastructure systems, including topics such as network segmentation, defense-in-depth strategies, and protective solutions. We will also cover essential cybersecurity aspects, such as breach threat detection and prevention related to OT/ICS environments including monitoring, detection, prevention, and OT SOC enrichment. Keywords: OT, CIS, ICS, SOC, use-cases, detect, prevent, monitor

Bilal Issa (Presenter)

Technical Lead

Trend Micro

Technical Leader working in the cyber security field for the past 10 years. Leading the technical operations of Trend Micro in Qatar to contribute and align with “Securing the Connected World” mission. Bilal is part of the subject matter experts for advanced threat protection specialized in threat research, malware analysis and reverse engineering.