ISA Announces First Founding Members of Global Cybersecurity Alliance

ISA Announces First Founding Members of Global Cybersecurity Alliance

The International Society of Automation (ISA) held a press conference today to announce the first Founding Members of its new Global Cybersecurity Alliance (GCA): Schneider Electric, Rockwell Automation, Honeywell, Johnson Controls, Claroty, and Nozomi Networks.

As we would expect, the speakers emphasized the importance of standards as the foundation for work in the Alliance. Speakers also tied in safety and productivity as partners with cybersecurity in protecting and improving manufacturing and critical infrastructure facilities and processes. I’m not so sure just exactly what the Alliance will accomplish, but if it succeeds in just raising awareness and a sense of urgency among companies it the industries, it will have accomplished an important task.

ISA created the Global Cybersecurity Alliance to advance cybersecurity readiness and awareness in manufacturing and critical infrastructure facilities and processes. The Alliance brings end-user companies, automation and control systems providers, IT infrastructure providers, services providers, and system integrators and other cybersecurity stakeholder organizations together to proactively address growing threats.

ISA is the developer of the ANSI/ISA 62443 series of automation and control systems cybersecurity standards, which have been adopted by the International Electrotechnical Commission as IEC 62443 and endorsed by the United Nations. The standards define requirements and procedures for implementing electronically secure automation and industrial control systems and security practices and assessing electronic security performance. The standards approach the cybersecurity challenge in a holistic way, bridging the gap between operations and information technology.

Leveraging the ISA/IEC 62443 standards, the Global Cybersecurity Alliance will work to increase awareness and expertise, openly share knowledge and information, and develop best practice tools to help companies navigate the entire lifecycle of cybersecurity protection. The Alliance will work closely with government agencies, regulatory bodies, and stakeholder organizations around the world.

“Accelerating and expanding globally relevant standards, certification, and education programs will increase workforce competence, and help end users identify gaps, reduce risks, and ensure they have the tools and systems they need to protect their facilities and installations,” said Mary Ramsey, ISA Executive Director. “Through the proliferation of standards and compliance programs, we will strengthen our global cyber culture and transform the way industry identifies and manages cybersecurity threats and vulnerabilities to their operations.”

The press release notes that first Founding Members of the Alliance are leading multi-national, industrial-technology providers with deep expertise in technology and applications, and they’ll apply their experience and knowledge to accomplish the Alliance’s priorities. However, two of the members were represented by building automation divisions. Two of the members are cybersecurity suppliers. Rockwell Automation is a pure play factory and process automation company and its Maverick Technologies division has been an ardent supporter of ISA. Schneider Electric is a large, multi-disciplined company, and I’m not sure which division within it is the sponsor.

“Participating in the Alliance truly shows the commitment our founding members have to the safety and security of the industrial ecosystem, as well as the criticality of collectively moving forward together to ensure the standards, best practices and methods are applied,” Ramsey said.

“ISA engaged with discussions, initiated by Schneider Electric, to create an ISA-led global, open and industry-wide alliance comprised of all cybersecurity stakeholder companies. ISA quickly expanded those conversations to include Rockwell Automation, Honeywell, Johnson Controls, Claroty, and Nozomi Networks. These first Founding Members have since worked together to help us define the Alliance’s objectives. We are thankful for their collaboration and commitment. Together we welcome companies and organizations from all segments of industry to join our efforts.”

The Alliance is seeking additional members to support its initiatives. End-user companies, asset owners, automation and control systems providers, IT infrastructure providers, services providers, and system integrators and other cybersecurity stakeholder organizations are invited to join. Annual contributions to fund initiatives are based on company revenues and are tax-deductible.

Perspectives: Quotes from the ISA Global Cybersecurity Alliance Founding Members

“Over the last few years, global industry has recognized that taking on increasingly dangerous cyber risks can’t be limited to a single company, segment, or region. However, until now, there has been limited ability to respond as a unified whole to these worldwide threats. But by establishing an open, collaborative, and transparent body, with a focus on strengthening people, processes, and technology, we can drive true cultural change. We are pleased that ISA has stepped forward, and we look forward to working openly and collaboratively with them, our fellow Founding Members, and many others affiliated with global industry, especially end users. Together we will bring to bear the standards-based technology, expertise, and special skills required to better secure and protect the world’s most critical operations and the people and communities we serve.” — Klaus Jaeckle, Chief Product Security Officer, Schneider Electric

“Cybersecurity is critical to digital transformation. It’s critical not only for the protection of information and intellectual property, but also for the protection of physical assets, the environment, and worker safety. We make it a priority to collaborate with partners and research institutions to develop secure products. Rockwell Automation participated in the development of the 62443 standards from the beginning and continues to support ISA cybersecurity initiatives. Our engagement with the Global Cybersecurity Alliance will be another important step in our efforts to help customers identify and mitigate risks.” — Blake Moret, CEO, Rockwell Automation

“Cybersecurity is the great equalizer to all companies. It’s critical to the connected world we live in and the cornerstone of trust that the world needs to be able to operate. Whether protecting critical infrastructure or managing a building’s operations, users need to do this with the confidence the employed systems are robust and secure. We are committed to and proud to work together ISA and the GCA members to continue to drive the adoption of the ISA/IEC 62443 series of standards and identify further ways to secure and protect the connected world which we live. At Honeywell, we see cybersecurity as a core part of the future we are making, and we see the GCA as an important way to work together to make that happen.” — Matthew Bohne, Vice President and Chief of Product Security, Honeywell Building Technologies

“Digital transformation in the building sector continues to accelerate, which heightens the urgency for cybersecurity across the industry and beyond. As a leader in the industrial automation controls business, Johnson Controls is already a strategic member of the ISASecure program and is consistently taking proactive actions to protect customers against cyber-threats and risks. Joining ISA Global Cybersecurity Alliance is a necessary and meaningful step as it supports our company values, customer adoption of the ISA/IEC 62443 standard and efforts to educate global government and regulatory bodies. We are proud to solidify our commitment to this important effort.” — Jason Christman, Vice President, Chief Product Security Officer, Global Products, Johnson Controls

“One of the most effective ways to drive consistency in an industry is by putting standards in place, and we’re looking forward to collaborating with all of these founding members, as well as future Alliance members, to help drive global best-practices forward in this historically standard-less environment. Claroty is committed to the mission of protecting all IoT and OT networks from cyber risks. Through our work with the Global Cybersecurity Alliance, we will be able to help shape the future of cybersecurity in these high-risk industries.” — Dave Weinstein, Chief Security Officer, Claroty

“Nozomi Networks believes real community collaboration, actionable standards and effective education are key ensuring a secure future for industrial organizations around the world. That’s why we are helping develop secure-by-design standards as a working member of ISA99 standards committees, why we’ve designed our industrial cyber security solutions for easy integration across the broadest possible set of industrial and IT technologies; and why we are thrilled to help establish the Global Cybersecurity Alliance. Together we will build a secure future for the industrial infrastructure that runs the world.” — Andrea Carcano, Nozomi Networks Co-founder and Chief Product Officer

Profinet Specification Now Includes Time Sensitive Networking TSN

Profinet Specification Now Includes Time Sensitive Networking TSN

I thought Time Sensitive Networks (TSN), an addition to the IEEE Ethernet specification, was a technology that held great promise. Some technologists I respected were working on it. Then it appeared the hype was about over. I haven’t heard anything for months. Suddenly arrives news that the Profinet specification now includes TSN support.

Profinet specification 2.4 has been completed and can be downloaded by all PI members. The specification includes TSN capabilities, and according to the organization, it is the first TSN version of an open industrial communication standard.

Gunnar Lessmann, Master Specialist Profinet at Phoenix Contact andLeader Profinet IO Working Group (CB/PG6) writes:

The Profinet technical working group CB/PG6, which has been responsible for creating and coordinating the technical specifications, has been part of PI since 2003. The members of this working group include more than 25 representatives of device and system manufacturers, technology providers, and chip manufacturers who cooperate in a very open and constructive way. I’ve had the pleasure of leading this working group since April of 2019 after having been a permanent member. The working group would also like to take this opportunity to extend our thanks to my predecessor Reiner Wamßer, who performed this “volunteer” work with great success and commitment.

Using the corresponding IEEE standards in such a way that the fundamental properties of Profinet are retained has always been important here. TSN now offers additional capabilities, such as guaranteed latency and quality of service, high-precision time synchronization, and seamless media redundancy – all using standard Ethernet hardware.

For this reason, I am pleased that the publication of the first “TSN version” of an open industrial communication standard was possible alongside the approval of Profinet specification 2.4. Naturally, specification 2.4 also includes all the details on Profinet which are separate from TSN – as usual, Profinet will remain fully compatible with all previous versions.

As with all other topics, we are continuously working on improving the standard. With regard to TSN for example, experience gained from the use of Profinet in the field and standardization from the joint activity from IEC/IEEE 60802 still have to be incorporated. There are also new topics, like the integration of 10 Mbit/s, APL, and cybersecurity, which also affect the basic specification.

Profinet Specification Now Includes Time Sensitive Networking TSN

Selling Excess Manufacturing Capacity

I receive many pitches every day. Many just don’t fit my interests. How could I pass up this one? “Just as Airbnb helps millions of people around the world instantly find a great place to stay for the night. What if car makers could use a similar model to easily order and manufacture lightweight 3D printed parts?”

So, I bit. And wound up with an interview with CEO of Xponential Works/Vice Chairman of Techniplas Prime Avi Reichental. His LinkedIn bio includes “parallel entrepreneur, board director, futurist, venturist, inventor, philanthropist”. He’s a busy guy. Wonder how he found time to chat with me.

In short, what is a supplier to do when it needs extra capacity but its capital assets are expensive—as in a large injection molding machine? On the other hand, what if you are a small supplier and have trouble landing consistent, long-term contracts leaving you with excess capacity?

Using digital technologies for communication, design, production, and quality, the two companies can link. The larger company with long-term contracts and capacity needs forges an agreement to “rent” the machines of the smaller company.

Geography becomes a second benefit. OEMs like having suppliers close to the plant. The Tier 1 has the flexibility to find a partner within desired range of the customer’s plant and use digital technology to send drawings, production orders, and other required documentation to the new remote plant.

As Reichental explained, “We have factories, associates, platforms, quality management systems, and brand recognition. Our problem is how to become agile and deliver on-time plus expanding our sales. We’re in a capital intensive industry. The answer was to extend to a group of smaller companies who don’t have the systems required by the OEMs but they have assets. We have created the equivalent of one additional factory per year by adding partnerships with these smaller companies shipping the equivalent of 1,000 tractor-trailers of product per month. Plus we now have the advantage of localizing production to the customer.”

Not stopping with injection molding, Reichental and his team have extensive additive manufacturing (3D printing) expertise. He adds, “Now we are layering additive/3D printing capabilities. Now there can be one-click to request, upload, get instant quote, through the cloud, process the order, get the manufacturing design, delivered physically by approved supplier with approved supply chain.”

Techniplas Prime has introduced a new approach to its e-manufacturing that is enabling the production of 40 million parts per year for BMW, Daimler, Ford, and other top auto manufacturers, or the equivalent of 1,000 truckloads of car parts per month, without the need to open a single new factory.

Five years in operation, it has revenues above $80 million out of parent company’s $500 million and is the fastest growing segment of the company. They proved it out internally before going out to 3rd parties. OEMs want to work with fewer suppliers. Techniplas Prime serves as aggregator for many suppliers so that OEM only needs to interact with it.

XponentialWorks is a venture investment, corporate advisory and product development company, specializing in artificial intelligence, digital manufacturing, 3D printing, robotics, and the digital transformation of traditional businesses. As a curator of leaders in Industry 4.0, the firm has built a unique ecosystem that unites the forces of early-stage companies with the experience and deep market knowledge of mature companies. XponentialWorks invests in and mentors the growth and success of promising early stage companies and acts as an edge organization for the benefit of larger, mid-market companies undertaking digital transformation.

Reichental concludes, “In the end, business innovation is more important than technology innovation.”

Profinet Specification Now Includes Time Sensitive Networking TSN

New Take On Edge Embedded Computing

I’ve been writing about how IT companies are taking their powerful compute platforms to the edge. Here is a balance view from an industrial network switch company combining LTE with Ethernet and embedding HMI/SCADA. Interestingly, it includes Node-RED and MQTT support.

ORing has released a new industrial dual 4G LTE M2M IoT gateway that includes Ignition Onboard and Ignition Edge Onboard. The industrial-grade design is compliant with requirements of IEC 61850-3.

The new gateway has built-in 8-port Gigabit Ethernet with 4×10/100/1000Base-T(X) and 4xGigabit SFP Combo ports. It also includes Ignition Onboard and Ignition Edge Onboard, for easy use of the powerful, web-based Ignition platform for human-machine interface (HMI), supervisory control and data acquisition (SCADA), and the Industrial Internet of Things (IIoT). Node-RED is also onboard, along with support for MQTT and other protocols. The Gateway is AT&T-certified and can be purchased with a bundled SIM card and LTE data plan.

The company has extensive experience in switch and wireless product design. ORing’s products have been deployed in surveillance, rail transport, industrial automation, power substations, renewable energy, and marine applications.

Ignition by Inductive Automation is an industrial application platform with numerous tools for building solutions in HMI, SCADA, and IIoT.

“We’re very pleased to see Ignition and Ignition Edge as part of this new product from ORing,” said Don Pearson, chief strategy officer for Inductive Automation. “Digital transformation is a big undertaking, and end users will certainly appreciate ORing making things easier for them.”

“We at ORing are very excited about the release of the innovative IGMG-P83244GC+-D4G IoT Gateway,” said Angus Shih, president of ORing Industrial Networking Corp. “This impressive technology includes the Ignition SCADA features and AT&T LTE cellular technology. This all-in-one gateway can provide powerful VPN cellular routing capabilities with database storage, Ignition, and Node-RED functions in one box to make IoT and SCADA applications deployment easier than ever before. It can also connect with Ignition servers and the most popular cloud platforms, including AT&T Dataflow, to build flexible edge-to-cloud IoT systems.”

Forging Abundance, Engineering the Big Challenges

Forging Abundance, Engineering the Big Challenges

Do you want to devote your life and engineering talents building social websites designed to trick people into giving you their personal data so that your company can sell it and the founder and his friends become billionaires? Or, would you rather do something significant, forging abundance, engineering the big challenge to help people survive and thrive?

I miss spending a week of my Augusts in Austin, Texas. No, not for the 105 deg F outside and 65 deg F inside the convention center. It was for National Instruments’ NI Week user conference. Some of the brightest engineers I knew worked there or were customers and the pursuit of solving big engineering challenges was palpable.

NI now focuses on instrumentation for solving those big challenges. Being out of my normal area of coverage, they don’t contact me anymore. But it’s still a cool company. Infected a little by “big company disease”, but still cool.

I thought about that while reading the latest Abundance Insider Newsletter from Peter Diamandis. This guy is crazy—crazy smart, that is. If you aren’t receiving the newsletter and following him, click here and start getting it. You may not totally agree, but it’ll blow your mind for sure.

Diamandis originated the X Prize to encourage accomplishing big, hairy, audacious ideas.

Here are some examples from the latest newsletter and a bonus thrown in from a podcast.

Renewable Energy

What: Siemens Gamesa is now leveraging the Earth’s surface for a future of energy abundance. The large-scale renewable energy technology manufacturer has just begun operations of what it claims is the world’s first electrothermal energy storage system. Already, Siemens Gamesa has turned a section of volcanic rock into a massive organic battery, capable of storing up to 130 megawatt-hours of energy for a week. The company additionally reports that its electrothermal energy storage system is significantly less expensive than conventional storage solutions. If we can begin to harness organic material for energy storage, how would this influence the modern-day power grid and storage solutions?

Why it’s important: Renewable energy has long been promoted as an alternative solution to fossil fuels and other contemporary sources of energy. However, their oft-cited limitation is that of energy storage. If Siemens Gamesa demonstrates the successful scale-up of its sustainable solution to the storage problem, pervasive implementation of renewable energy sources would become a much more feasible option, and long-term implications would abound. If communities could soon store energy beneath their homes for extended periods of time, how might this influence real estate values and opportunities for expansion? What new microgrid networks and local economies would arise?

City of the Future?

What it is: Long in the works, Sidewalk Labs’ plan to build out a high-tech utopia on Toronto’s waterfront is now out. While still subject to a thorough public vetting process — principally by government-appointed, non-profit partner Waterfront Toronto — the plan outlines an urban model for integrated smart cities of the future. Dubbed “the most innovative district in the world” by Sidewalk Labs CEO Dan Doctoroff, the pitch’s most pioneering components include autonomous vehicle networks, ubiquitous public Wi-Fi, an 89 percent reduction in greenhouse gases, and countless sensors for collection of “urban data” to optimize civil engineering decisions.

Why it’s important: Already, Sidewalk Labs’ comprehensive plan has been projected to help create 44,000 jobs and generate $4.3 billion in annual tax revenue. Sidewalk Labs has additionally stated it will spend $1.3 billion on the project with the aim of spurring $38 billion in private sector investment by 2040. Beyond the targeted district, however, a materialized smart city plan could become an ideal testing ground for next-generation breakthrough technologies and automated ecosystems that provide seamlessly delivered public services and predictive routing.

Human-like Prosthetics

What it is: A team of researchers at Carnegie Mellon University (CMU) has made extraordinary headway in the field of high-tech prosthetics, creating a bionic arm that functions smoothly without a brain implant. Previous robotic prosthetics required a patient to undergo high-risk, invasive surgery for a brain implant to achieve maximum robotic mobility. This arm, however, bridges the gap between seamless function and non-surgical bionics. In one instance, it was shown capable of following a computer screen cursor in real time without exhibiting the jerky motions and intermittent delays typical of other non-surgical mind-controlled prosthetics.

Why it’s important: This innovation represents a fundamental leap in the age-old mission to enhance the quality of life and autonomy of individuals who have lost a limb. By improving prosthetic quality at significantly diminished risk, non-invasive bionics no longer require patients to risk their health to enjoy long-term use of a high-functioning, mind-controlled limb. As brain-computer interface (BCI) technology continues to surge forward, we are quickly charting the path to a future wherein responsive prosthetics will serve countless uses, from limb replacement to assistive aids in any number of industries and professions.

Repurpose your Chem E (or other) Degree For Greater Good

In an interview on TechNation with Moira Gunn, Neil Kumar, CEO of Bridge Bio and a Chem E , talked of reflecting when he was in school that the traditional industries that employed Chem Es were on the decline—Oil & Gas and Plastics. So he looked around and focused on biopharma. He noted that many of the startups in that market were engineers with a Chem E background. His company has developed a new model for addressing genetically-driven diseases affecting a small number of patients.

Conclusion

Is it time to start thinking bigger about the contribution you can make to society (and yourself and family)? Instrumentation, control, automation, data—these are all technologies and skills that can lead to a better life than trapping people on their smart phones in an app that sucks you dry.

Profinet Specification Now Includes Time Sensitive Networking TSN

Automation Experience Center plus Automation Cybersecurity News

Industrial Automation. I guess sometimes it’s good and sometimes not. Tesla had difficulty ramping up production on its low-end vehicle. Elon Musk blamed automation for his problems. Well maybe it was vaguely automation. But maybe they tried automating too much, or they automated things they shouldn’t have. Maybe Rockwell Automation now has a place he can drive to to learn more about automating production.

While I was traveling, Rockwell Automation released some news. I had to seek clarification on some. Here are two interesting items.

The first piece of news concerned Rockwell Automation opening an 8,000 square-foot Electric Vehicle (EV) Innovation Center at 111 North Market Street in San Jose, California, within its Information Solutions development facility. The center will provide live manufacturing demonstrations, hands-on trials utilizing new technology and events showcasing collaboration with industry experts and Rockwell Automation partners.

Upon first glance I thought maybe it was getting into the EV business. Actually it is bringing its experience and products from “Detroit” building cars to Silicon Valley building cars—just with different power trains.

Utilizing augmented and virtual reality modeling, the EV Innovation Center provides automotive start-ups and established manufacturers an environment to learn new technologies and standards, enabling them to deliver electric vehicles to market faster, with less risk and at lower cost.

The Center features not only traditional Rockwell products, but also features partners such as its FactoryTalk InnovationSuite powered by PTC, Eagle Technologies’ battery pack assembly machine, and FANUC robot technologies.

Other partners featured include Hirata, a turnkey assembly line builder, provides an assembly cell that demonstrates electric drive unit assembly and testing; Emulate 3D, Rockwell Automation’s simulation software, helps to prototype and test machines before they’re built; teamtechnik performs functional testing to confirm performance before building the drive into the electric vehicle.

“With growing global consumer demand, electric vehicle companies are challenged to meet aggressive production timelines,” said John Kacsur, vice president, Automotive and Tire Industries, Rockwell Automation. “We established the Electric Vehicle Innovation Center to expand their possibilities and get their products to consumers quickly and at the lowest possible cost, while operating more efficiently.

The second Rockwell news concerns its partner Claroty and cybersecurity services. To help prevent incidents and combat the unpredictable threats that cause them, industrial companies around the world can now manage cyber risk in their operations using the Rockwell Automation Threat Detection Services powered by the Claroty threat detection platform.

“A scary aspect of security threats is what you don’t know about them – what techniques they’ll use, what attack vector they’ll leverage, what vulnerabilities they’ll exploit,” said Umair Masud, manager security services portfolio, Rockwell Automation. “Our Threat Detection Services combine our innate understanding of industrial automation with Claroty’s trusted OT network visibility. The services can give companies peace of mind by protecting not only one facility but their entire supply chain from unpredictable threats.”

The Threat Detection Services help safeguard connected operations in three key ways:

  • Identify and Protect: Identifying all industrial control networked assets, and their vulnerabilities, to help companies know what to protect
  • Detect: Monitoring networks for not only known threats but, more importantly, anomalous traffic or behaviors to alert companies of a security incident – possibly before it even happens
  • Response and Recovery: Developing plans for containing, eradicating and recovering from attacks to keep operations running or more quickly return to a fully operational state

The Claroty threat detection platform creates an inventory of a user’s industrial network assets, monitors traffic between them and analyzes communications at their deepest level. Detected anomalies are reported to plant and security personnel with actionable insights.

“The Claroty platform, used within the Threat Detection Services, can accelerate a company’s journey to more connected and digitally driven operations,” said Amir Zilberstein, co-founder and CEO, Claroty. “Most critically, the platform can help companies detect and quickly respond to threats that bypass their security controls. But it can also give companies a deeper understanding of their industrial assets and improve their ability to keep operations running.”

Follow this blog

Get a weekly email of all new posts.