Take-Aways (AI)
  • ENISA published a gui­de on the secu­ri­ty of IoT solu­ti­ons in fac­to­ry auto­ma­ti­on on Novem­ber 19, 2018.
  • The gui­de aims to impro­ve the cyber secu­ri­ty situa­ti­on of Indu­stry 4.0 organizations.
  • Recom­men­ded mea­su­res are aimed at indu­stri­al IoT ope­ra­tors and manu­fac­tu­r­ers and ser­ve as a veri­fia­ble checklist.
  • The aim is to pro­mo­te EU-wide coope­ra­ti­on and rai­se awa­re­ness of thre­ats with a focus on “Secu­ri­ty for Safety”.

The Euro­pean Uni­on Agen­cy For Net­work and Infor­ma­ti­on Secu­ri­ty (ENISA) is based on the ENISA Regu­la­ti­on and is tas­ked, among other things, with sup­port­ing EU bodies in poli­cy mea­su­res in the area of net­work and infor­ma­ti­on secu­ri­ty. As of Novem­ber 19, 2018, it has published a gui­de­line on secu­ri­ty at the Use of Inter­net of Things solu­ti­ons in the con­text of manu­fac­tu­ring auto­ma­ti­on published. It sta­tes in this regard:

The gui­de­lines and secu­ri­ty mea­su­res listed in this stu­dy aim at impro­ving the cyber­se­cu­ri­ty postu­re of Indu­stry 4.0 orga­nizati­ons that have adopted or plan to adopt Indu­stri­al IoT devices and solu­ti­ons that enhan­ce auto­ma­ti­on in indu­stri­al ope­ra­ti­ons. The­se secu­ri­ty mea­su­res app­ly to a wide audi­ence span­ning Indu­stri­al IoT ope­ra­tors and manufacturers/vendors, which can uti­li­se the­se mea­su­res and recom­men­da­ti­ons as a check­list against which to exami­ne their Indu­stry 4.0 secu­ri­ty solutions.

The aim of the stu­dy is to ser­ve as a refe­rence point to pro­mo­te col­la­bo­ra­ti­on on Indu­stry 4.0 and Indu­stri­al IoT secu­ri­ty across the Euro­pean Uni­on and rai­se awa­re­ness of the rele­vant thre­ats and risks with a focus on “secu­ri­ty for safety”.

The gui­de is available on the ENISA web­site.