AVEVA HMI/SCADA Security Approach Whitepaper

This whitepaper outlines AVEVA's approach to HMI/SCADA security, emphasizing the importance of information security as a key component of their business strategy. It details the rigorous Security Development Lifecycle (SDL) that AVEVA employs to mitigate cybersecurity risks associated with their HMI/SCADA offerings. The document describes the SDL process, which includes training for software developers, security requirements management, security design considerations, implementation practices, verification testing, and incident response planning. It also highlights the shared responsibility between AVEVA and its customers in maintaining secure environments. Furthermore, the whitepaper discusses the integration of cybersecurity within broader industrial control system safety and reliability programs, referencing the NIST Cybersecurity Framework and ISA/IEC 62443 standards. Recommendations for securing customer environments and ensuring secure application development are provided, along with a recommended secure network architecture to protect against unauthorized access.