Cybersecurity Overview

Power Operation has security capabilities that:

  • Align with cybersecurity standards in the IEC 62443 international standard for business IT systems and Industrial Automation and Control Systems (IACS) products. Go to the International Electrotechnical Commission website for information about the IEC62443 international standard.

IEC 62443

IEC 62443 is an international cybersecurity Operational Technology (OT) standard with various levels of robustness against cyber threats.

Power Operation is SL2 certified to comply with IEC 62443 standard at the component level:

  • IEC 62443-4.1: Assess a supplier’s product development lifecycle for Industrial Automation and Control Systems (IACS).
  • IEC 62443-4.2: Defines the security requirements for components of an IACS.

To communicate a security topic affecting a Schneider Electric product or solution, go to https://www.se.com/ww/en/work/support/cybersecurity/report-a-vulnerability.jsp.

warning

potential compromise of System availability, integrity, and confidentiality

  • Change default passwords to help prevent unauthorized access to settings and information.

  • Use Windows Active Directory for user account management and access to network resources.

  • Disable unused ports/services and default accounts, where possible, to minimize pathways for malicious attacks.

  • Place networked devices behind multiple layers of cyber defenses (such as firewalls, network segmentation, and network intrusion detection and protection).

  • Use cybersecurity best practices (for example: least privilege, separation of duties) to help prevent unauthorized exposure, loss, modification of data and logs, interruption of services, or unintended operation.

  • Follow cybersecurity tasks as described by your organization or contact your network administrator.

Failure to follow these instructions can result in death, serious injury, equipment damage, or permanent loss of data.