0990 – Training: Cybersecurity & Hardening

Cybersecurity in an operational technology (OT) environment is becoming increasingly important in view of growing digitalization and networking of production facilities and critical infrastructures. Automation Studio offers possibilities to increase resistance to cyberattacks and to secure operation.

• Requirements
• Automation Studio

• Contents
• Determine the consequences of NIS2.0 and the Cyber Resilience Act (CRA) for industrial automation
• Recognize and classify the effects of daily cyberattacks in an industrial environment
• Compare IT vs. OT communication security goals and their respective priorities
• Explain the pros and cons of different encryption methods, including the importance of hybrid encryption
• Describe the content and meaning of certificates and public key infrastructure (PKI)
• Understand TLS (Transport Layer Security) as the current protocol for communication security and associate its functionality with security goals
• Find the B&R cybersecurity support channels and know how to use them
• Create and manage self-signed and 3rd-party certificates in the Automation Studio Certificate Store
• Use the different types of SSL configurations in Automation Studio and explain their connection to TLS
• Explain secure ANSL communication with user authentication and encryption
• Configure an encrypted connection to an FTP server and an HTTPS encrypted connection to a web server and mapp View server
• Set up encrypted connections with additional client authentication for communication with the controller's OPC UA server
• Implement certificate handling via an external PKI for encrypted OPC UA communication
• Create firewall rules to make controllers harder to discover in the network
• Describe the use cases for B&R libraries ArCert and ArSsl