+IND.3.2.A1 Planning the Use of Remote Maintenance in OT (B) [Planner]

IND.3.2.A1 Planning the Use of Remote Maintenance in OT (B) [Planner]

In industry, a uniform, central remote maintenance concept MUST be established for all remote maintenance systems for all of an organisation's OT. The following aspects MUST be considered in the OT remote maintenance concept:

  • Specific requirements from system manufacturers
  • Specific requirements of decentralised infrastructures
  • Specific requirements for remote maintenance connections
  • Specific requirements for the availability of remote maintenance
  • Specific requirements due to environmental conditions
  • Specific requirements due to existing plants

All these aspects MUST be coordinated with all the internal and external entities involved.

All remote maintenance access points that provide possible access to an organisation's ICS MUST be recorded in central documentation.

When purchasing new machines with remote maintenance functions, the corresponding information security requirements MUST be coordinated with the supplier.

An organisation SHOULD seek to standardise the remote maintenance solutions it uses. As soon as standardised solutions for remote maintenance are planned, the OT and the office and building IT at hand MUST be jointly coordinated.

1. Forbhreathnú

1.1 Tagairtí

1.2 Ceanglais aitheanta

1.3 Rialacháin ghaolmhara

2. Ceanglais aitheanta

Ceanglais

3. Rialacháin ghaolmhara

Rialacháin

Saincheisteanna nasctha

Naisc
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.28 Software Vulnerabilities or Errors