Role
System Integrator
The party that brings together IACS components from different suppliers into a working, secure system and delivers it to the asset owner.
Secure architecture
Designing a system architecture that makes the intended Security Level Target achievable.
Zones and conduits
Translating the zone design into a concrete network layout and firewall rules.
Hardening
Disabling unnecessary services, ports and default accounts on installed systems.
Secure configuration
Applying secure configuration baselines in line with vendor guidelines and IEC 62443-3-3.
FAT and SAT
Explicitly testing security requirements during Factory and Site Acceptance Tests.
Evidence
Documenting and demonstrating that the delivered system meets the requirements set.
Handover and maintenance
Ensuring a secure handover to the asset owner, including maintenance agreements.