Ovation™ Security Center Data Sheet Provides enhanced control system protection for secure, reliable, safe and efficient plant operation Tightly integrated with the industry-leading Ovation control system Eases management of cybersecurity risks Assists power generation customers with NERC CIP standards compliance for reliable operation of bulk electric systems Helps water and wastewater industry customers tackle mounting pressure to implement cybersecurity initiatives that safeguard public health and the environment Emerson Process Management Power & Water Solutions’ Ovation™ Security Center helps customers operate their plants securely, reliably, safely and efficiently. Tightly integrated into the industry-leading Ovation control system, the Ovation Security Center makes it easier for Emerson’s power generation, water and wastewater customers to automatically manage the execution of security control measures. For customers in the power industry, the product assists in complying with the North American Electric Reliability Corporation (NERC) Critical Infrastructure Protection (CIP) standards. These standards require the power industry to identify and protect cyber assets that may impact the reliable operation of bulk electric systems. Emerson’s water and wastewater customers can implement the product to help deal with the mounting pressure to step up cybersecurity initiatives as part of their overall efforts to safeguard public health and the environment. The Ovation Security Center consists of a suite of hardware-based and virtualized security applications that have the ability to enhance and © Emerson Process Management Power & Water Solutions, Inc. PWS_003845 [30] manage control system cybersecurity without disrupting the controlled process. These enhancements complement Ovation’s native security functions, resulting in an integrated and robust solution. The Ovation Security Center’s integrated hardware and virtual software are packaged in an enclosure that includes an interface to the Ovation network. The cabinet is located outside of the control system’s security perimeter in a separate subnet and demilitarized zone (DMZ). The Security Center applications use encryption to securely exchange information with Ovation network switches and routers as well as workstations and controllers. Each Ovation Security Center application includes a dashboard with configuration tools and operating status displays. The applications also provide the capability to send alert notifications and generate security reports for operations management and regulatory compliance. Periodic updates to patches, vulnerability databases and security signatures are downloaded through Emerson’s SureService™ Ovation Secu

Ovation™ Security Center Data Sheet Ovation Security Center Virtualized Applications Application Name Antivirus protection Provides real-time virus and malware protection for workstations and servers with Microsoft® Windows®-based operating systems. Configuration management Effectively manages Ovation control system configurations with a focus on Windows-based workstations, network devices and Ovation’s active directory. Device control Provides secure and centralized management of storage devices associated with Ovation Windows-based workstations, such as embedded CD/DVD drives and serial/parallel...

Ovation™ Security Center Data Sheet can provide event notifications, alerts or reports from multiple security applications to plant or corporate locations outside the control room. Additionally, the Security Center can use this connection to receive application content and software updates such as new security patches, virus signatures and detection rules from computers connected to the plant LAN. User Interface Ovation Security Center applications are configured and maintained through a dedicated user interface provided on a standard nonOvation Windows-based computer equipped with Remote Desktop...

Ovation™ Security Center Data Sheet Plant-wide Security Implementation Ovation Security Center applications can be extended beyond Ovation to include other thirdparty control systems used within the plant. Network intrusion detection, security incident and event management, and vulnerability assessment can directly add other systems. The following applications require collaboration between the OEM and the asset owner for implementation: The Ovation Security Center provides enhanced security management that assists Ovation control system customers with meeting regulatory compliance obligations....