API Std 1164 SCADA Security, First Edition

Cover ......Page 1 Special Notes......Page 4 Foreword......Page 5 Contents......Page 7 2.1 Definitions......Page 9 2.2 Acronyms......Page 18 3.1 Personnel......Page 19 3.4 Business Continuity Plan (BCP)......Page 20 3.6 Change Management......Page 21 4 Physical Security......Page 22 5.3 Operating System Accounts......Page 23 5.5 Password Controls......Page 24 5.7 Disabled Non-required Services......Page 25 6 Information Distribution......Page 26 6.2 Restricted......Page 27 Figure 2-Typical Non-isolated Implementation-Not Recommended......Page 28 Figure 3-Typical Firewall Isolation Implementation-Minimal Isolation......Page 29 7.3 Data Interchange......Page 32 8.1 Field Device Technology......Page 34 8.2 System Access......Page 35 Annex A (informative)......Page 36 Annex B (Example) SCADA/Control System Security Plan......Page 55 Additional Resources......Page 72 Figures ......Page 0 Figure 1-General SCADA Systems Layout......Page 17 Figure 5-Typical Dual-homed Computer Bridge Implementation-Not Recommended......Page 30