Operational Technology (OT) security is a multifaceted challenge, requiring organizations to address diverse risks and vulnerabilities. Frameworks like the NIST Cybersecurity Framework 2.0 (CSF 2.0) help structure these efforts. Although not OT-specific, CSF 2.0 provides valuable guidance for improving cybersecurity across industries. In Europe, frameworks like NIS2 extend these protections, emphasizing the security of critical infrastructure.
At SSH Communications Security (SSH), we’ve long delivered OT security solutions, focusing on scalable Zero Trust access management for critical Industrial Control Systems (ICS) in OT environments. With our new partnership with Honeywell, we’ve significantly expanded our OT security portfolio, incorporating advanced discovery, monitoring, and compliance tools.
Honeywell’s Strategic Acquisition of SCADAfence
Honeywell, a global leader in industrial automation and safety, recently acquired SCADAfence. This acquisition enriches the Honeywell Forge Cybersecurity+ suite, integrating SCADAfence’s capabilities in asset discovery, threat detection, and compliance management. These features now form the core of a joint solution between Honeywell and SSH.
A Unified Solution Aligned with NIST CSF 2.0
Through this collaboration, our combined offering spans critical functions within the NIST CSF 2.0 framework: Identify, Protect, Detect, and Respond. This unified approach prioritizes proactive cybersecurity, making attacks, unauthorized access, and ransomware incursions more difficult, while equipping organizations with robust incident response capabilities.
The combined solution includes Honeywell Cyber Insights and Cyber Watch, as well as PrivX OT, and it allows customers to:
- Manage access to OT/ICS environments at scale with full lifecycle access management, just like with Zero Trust Privileged Access Management in IT
- Discover OT assets
- Apply continuous passive monitoring to deliver visibility, asset management, traffic analysis and real-time threat detection
- Pre-emptively thwart suspicious access attempts based on artificial intelligence (AI)
This is how the solution works on a high-level:
Key Features of the Joint Solution
The integrated solution leverages Honeywell Cyber Insights and Cyber Watch alongside SSH’s PrivX OT, offering the following:
- Scalable Access Management
- Manage OT/ICS access lifecycles with Zero Trust Privileged Access Management.
- Ensure secure remote and on-site access for maintenance and troubleshooting, reducing downtime and improving efficiency.
- Comprehensive OT Asset Discovery
- Identify and monitor OT assets with continuous, passive oversight for improved visibility, asset management, and threat detection.
- AI-Powered Threat Mitigation
- Employ artificial intelligence to identify and block suspicious access attempts proactively.
- Unified IT/OT Access
- Manage IT and OT environments through a centralized, protocol-agnostic platform, eliminating the need for multiple tools or vendor-specific solutions.
- Enhanced Security Protocols
- Link with identity management systems like Active Directory and Microsoft Entra for dynamic access verification.
- Implement Zero Trust policies, validating each access attempt in real time.
- Continuous Session Validation and Device Trust
- Restrict access to verified devices only, with automatic session termination for compromised endpoints.
- Multi-Protocol Support
- Support diverse IT and OT protocols, ensuring seamless integration across systems.
- Secure Patch Management and File Transfers
- Conduct malware-scanned patching and diagnostics, ensuring critical infrastructure remains safe from threats.
- Credential-less Authentication
- Adopt Just-in-Time (JIT) ephemeral access for secure, password-free session management, aligning with Zero Trust principles.
- Compliance and Auditing
- Stay compliant with regulations like ISA/IEC 62443, ISO 27001, NIS/NIS2, and NIST. Gain real-time policy reporting to flag violations immediately.
The Advantages of Honeywell Forge and SSH PrivX OT
This partnership empowers organizations to:
- Securely access and monitor OT assets at scale.
- Enhance operational efficiency with integrated IT/OT security.
- Reduce the complexity and costs associated with managing multiple point solutions.
Ready to Transform Your OT Security?
As OT and IT converge, the stakes for cybersecurity are higher than ever. Our joint solution offers a streamlined path to safeguarding critical infrastructure, ensuring both safety and compliance without straining internal resources.
About DT Asia
DT Asia began in 2007 with a clear mission to build the market entry for various pioneering IT security solutions from the US, Europe and Israel.
Today, DT Asia is a regional, value-added distributor of cybersecurity solutions providing cutting-edge technologies to key government organisations and top private sector clients including global banks and Fortune 500 companies. We have offices and partners around the Asia Pacific to better understand the markets and deliver localised solutions.
How we help
If you need to know more about SSH’s PrivX OT and Honeywell (a Comprehensive OT Security Solution), you’re in the right place, we’re here to help! DTA is SSH’s distributor, especially in Singapore and Asia, our technicians have deep experience on the product and relevant technologies you can always trust, we provide this product’s turnkey solutions, including consultation, deployment, and maintenance service.
Click here and here and here to know more: https://dtasiagroup.com/ssh/