Ensuring information security in the production network of an industrial enterprise

Abstract

Objective. The purpose of this article is to explore issues and develop approaches to enhance information security in the production control networks of industrial enterprises to the necessary level. Traditional and once-effective protective methods based on physical isolation have become outdated, necessitating new approaches that consider the characteristics of automated process control systems.

Method. The analysis presented in the article identifies differences between automated process control systems and classical information systems, based on the NIST SP 800-82 standard, and evaluates their unique requirements and vulnerabilities. Methods for improving information security are proposed, including regular training, audits, network segmentation, and the use of specialized protection systems.

Result. An action algorithm has been developed to protect the APCS system, ensuring that enterprises comply with regulatory requirements and minimize the risks of cyber attacks, as well as protect critical production processes. A set of preventive measures and methods for eliminating vulnerabilities in APCS systems to protect industrial networks is proposed.

Conclusion. Ensuring information security in APCS requires a comprehensive approach, including risk management strategies, technical means and continuous personnel training. The implementation of the proposed measures and strategies will increase the overall resilience of industrial systems to modern information security threats.