Eaton SEFELEC 5 Series, User Manual

Page: 165 / 209

User manual SEFELEC 5x Series 164 v1.06
CYBER SECURITY RECOMMENDATIONS
SEFELEC 5x range has been designed with cyber security as a major consideration. A number
of features are offered in the product to address cyber security risks. These Cybersecurity Rec-
ommendations provide information to help users to deploy and maintain the product in a manner
that minimizes the cybersecurity risks. These Cybersecurity recommendations are not intended
to provide a comprehensive guide to cybersecurity, but rather to supplement customers' existing
cybersecurity programmes.
EATON is committed to minimizing the cybersecurity risk in its products and deploying cyberse-
curity best practices in its products and solutions, making them more secure, reliable and com-
petitive for customers.
17.1.1. ASSET MANAGEMENT:
Keeping track of software and hardware assets in your environment is a pre-requisite for effec-
tively managing cybersecurity. EATON recommends that you maintain an asset inventory that
identifies each important component individually. To facilitate this, SEFELEC 5x Range supports
the following identifying information:
- Manufacturer, Type, serial number, F/W version number, and location. Most of this information
is shown on a sticker at the back of the unit.
For the Firmware revision refer to Section 6.5 of the operating manual.
17.1.2. RISK ASSESSMENT:
EATON recommends conducting a risk assessment to identify and assess reasonably foreseea-
ble internal and external risks to confidentiality, availability and integrity of the System | Device
and its environment. This exercise should be conducted in accordance with applicable technical
and regulatory frameworks such as IEC 62443. The risk assessment should be repeated period-
ically.
17.1.3. PHYSICAL SECURITY:
An attacker with unauthorized physical access can cause serious disruption to device function-
ality. Additionally, Industrial Control Protocols do not offer cryptographic protections, making ICS
and SCADA communications especially vulnerable to threats to their confidentiality. Physical
security is an important layer of defence in such cases. SEFELEC 5x is designed to be deployed
and operated in a physically secure location.