+IND.2.4 Machine
---+IND.2.4.G1. Failure or Disruption due to Insufficient Maintenance
---+IND.2.4.G2. Targeted manipulations
---+IND.2.4.A1 Remote Maintenance by Mechanical and System Engineers [OT Operations] (B)
---+IND.2.4.A2 Operation After End of Warranty [OT Operations] (B)

IND.2.4 Machine

Introduction

A machine is a technical device that performs automated tasks. A machine tool processes workpieces in a pre-defined manner, for example. It is controlled by an IT system that provides the corresponding work instructions and steps. Such machines are also referred to as automatons.

In most cases, machines are designed by mechanical engineers and provided with pre-defined functions. However, the operator of a machine can also define the parameters it follows when working. Shapes to be milled or calibrations for certain materials can thus be set. Some machines have various interfaces (e.g. for removable media, specialised programming devices, or network access) that enable the operator to change their parameters.

In many cases, mechanical engineers also offer remote maintenance services to detect wear early on or respond quickly in case of problems.

Objective

This module describes how electronically controlled, semi- or fully automatic machines (e.g. CNC machines) can be protected regardless of their manufacturer, type, specific purpose, and place of use.

Scoping and Modelling

Module IND.2.4 Machine must be applied once to each machine in use.

This module supplements the generic module IND.2.1 General ICS Components and requires its prior implementation. Furthermore, it only defines requirements for machines whose internal structures cannot be accessed by an organisation.

Security requirements for process control and automation technology are also not described. Module IND.1 Process Control and Automation Technology must be implemented in this regard. The area of functional safety is also not addressed. More details on this are published in IND.2.7 Safety Instrumented Systems.

Useful Resources

No additional information is available for module IND.2.4 Machine.

1. Übersicht

IND.2.4.A1 Remote Maintenance by Mechanical and System Engineers [OT Operations] (B)

There MUST be a central policy for remote maintenance of a machine. This MUST regulate how the respective remote maintenance solutions should be used. The policy MUST also specify how communication links should be protected. It MUST describe the activities to be monitored during remote maintenance, as well.

Moreover, it SHOULD NOT be possible to access other IT systems or machines of the organisation in question via remote maintenance of a machine.

If a service provider is to be used in this regard, the manner in which the information stored in the machine is to be processed MUST be agreed.
IND.2.4.A2 Operation After End of Warranty [OT Operations] (B)

A process designed to ensure that a given machine can be securely operated beyond its warranty period MUST be established. To this end, further support services MUST be contractually agreed with the supplier.

1.1 Referenzen

1.2 Identifizierte Anforderungen

1.3 Zugehörige Regulierungen

2. Identifizierte Anforderungen

Anforderungen

3. Zugehörige Regulierungen

Regulierungen

Verknüpfte Vorgänge

Verknüpfungen
includes IND.2.4.G1. Failure or Disruption due to Insufficient Maintenance
includes IND.2.4.G2. Targeted manipulations