| org.1 Security Policy |
Compliance, Cybersecurity assessment, Risk and Vulnerability Management, Communications plan |
| SafeDoor®OT (Secure access to USB storage drives on OT networks) |
Partial coverage |
| SafeDoor®OT Secure access |
Partial coverage |
| SafeDoor® OT (Protection against attacks through USB devices in OT and isolated networks) |
Partial coverage |
| org.2 Security standard |
Compliance |
|
|
| org.3 Security procedures |
Compliance, Use control policy, Activity log policy, Backup Policy |
| SafeDoor®OT (Secure access to USB storage drives on OT networks) |
Partial coverage |
| SafeDoor®OT Secure access |
Partial coverage |
| org.4 Authorization process |
Account management, PKI infrastructure |
| SafeDoor®OT (Secure access to USB storage drives on OT networks) |
Full coverage |
| SafeDoor®OT Secure access |
Full coverage |
| SafeDoor® OT (Protection against attacks through USB devices in OT and isolated networks) |
Full coverage |
| op.pl.1 Risk analysis |
Cybersecurity assessment, Risk and Vulnerability Management |
| SafeDoor®OT (Secure access to USB storage drives on OT networks) |
Partial coverage |
| SafeDoor®OT Secure access |
Partial coverage |
| SafeDoor® OT (Protection against attacks through USB devices in OT and isolated networks) |
Partial coverage |
| op.pl.2 Security architecture |
Network communications control, Secure network design |
| SafeDoor®OT (Secure access to USB storage drives on OT networks) |
Partial coverage |
| SafeDoor®OT Secure access |
Partial coverage |
| SafeDoor® OT (Protection against attacks through USB devices in OT and isolated networks) |
Partial coverage |
| op.pl.3 Acquisition of new components |
Configuration control, Equipment use control, Device control |
| SafeDoor®OT (Secure access to USB storage drives on OT networks) |
Partial coverage |
| SafeDoor®OT Secure access |
Full coverage |
| SafeDoor® OT (Protection against attacks through USB devices in OT and isolated networks) |
Partial coverage |
| op.pl.4 Sizing / Capacity Management |
Hardware and software inventory, Redundancy system |
|
|
| op.pl.5 Certified components |
Certification of the main ICS providers |
|
|
| op.acc.1 Identification |
Hardware and software inventory, Access control policy |
| SafeDoor®OT (Secure access to USB storage drives on OT networks) |
Partial coverage |
| op.acc.2 Access requirements |
Basic user access control, Multi-factor user access control, Access control policy |
| SafeDoor®OT (Secure access to USB storage drives on OT networks) |
Partial coverage |
| SafeDoor®OT Secure access |
Partial coverage |
| SafeDoor® OT (Protection against attacks through USB devices in OT and isolated networks) |
Partial coverage |
| op.acc.3 Segregation of functions and tasks |
Account management |
| SafeDoor®OT (Secure access to USB storage drives on OT networks) |
Full coverage |
| SafeDoor®OT Secure access |
Full coverage |
| SafeDoor® OT (Protection against attacks through USB devices in OT and isolated networks) |
Full coverage |
| op.acc.4 Access rights management process |
Device control, Account management |
| SafeDoor®OT (Secure access to USB storage drives on OT networks) |
Full coverage |
| SafeDoor®OT Secure access |
Full coverage |
| SafeDoor® OT (Protection against attacks through USB devices in OT and isolated networks) |
Full coverage |
| op.acc.5 op.acc.5 Authentication methods (external users) |
Hardware Security Keys, Basic user access control, Multi-factor user access control |
| SafeDoor®OT (Secure access to USB storage drives on OT networks) |
Partial coverage |
| SafeDoor®OT Secure access |
Partial coverage |
| SafeDoor® OT (Protection against attacks through USB devices in OT and isolated networks) |
Partial coverage |
| op.acc.6 op.acc.6 Authentication methods (organization\'s users) |
Hardware Security Keys, Basic user access control, Multi-factor user access control |
| SafeDoor®OT (Secure access to USB storage drives on OT networks) |
Partial coverage |
| SafeDoor®OT Secure access |
Partial coverage |
| SafeDoor® OT (Protection against attacks through USB devices in OT and isolated networks) |
Partial coverage |
| op.exp.1 Asset inventory |
Hardware and software inventory |
|
|
| op.exp.2 Security configuration |
Configuration control |
| SafeDoor®OT Secure access |
Full coverage |
| op.exp.3 Security Configuration Management |
Configuration control |
| SafeDoor®OT Secure access |
Full coverage |
| op.exp.4 Maintenance and security updates |
Reliable updates, Upgrade testing support |
| SafeDoor®OT (Secure access to USB storage drives on OT networks) |
Partial coverage |
| SafeDoor®OT Secure access |
Partial coverage |
| SafeDoor® OT (Protection against attacks through USB devices in OT and isolated networks) |
Partial coverage |
| op.exp.5 Change Management |
Configuration control |
| SafeDoor®OT Secure access |
Full coverage |
| op.exp.6 Protection against malicious code |
Advanced antimalware |
| SafeDoor®OT (Secure access to USB storage drives on OT networks) |
Full coverage |
| SafeDoor®OT Secure access |
Full coverage |
| SafeDoor® OT (Protection against attacks through USB devices in OT and isolated networks) |
Full coverage |
| op.exp.7 Incident Management |
Incident response support |
| SafeDoor®OT (Secure access to USB storage drives on OT networks) |
Full coverage |
| SafeDoor®OT Secure access |
Full coverage |
| SafeDoor® OT (Protection against attacks through USB devices in OT and isolated networks) |
Full coverage |
| op.exp.8 Activity log |
Inspect endpoint logs, Activity log policy |
| SafeDoor®OT (Secure access to USB storage drives on OT networks) |
Partial coverage |
| SafeDoor®OT Secure access |
Full coverage |
| SafeDoor® OT (Protection against attacks through USB devices in OT and isolated networks) |
Partial coverage |
| op.exp.9 Incident management log |
Inspect endpoint logs, Activity log policy |
| SafeDoor®OT (Secure access to USB storage drives on OT networks) |
Partial coverage |
| SafeDoor®OT Secure access |
Full coverage |
| SafeDoor® OT (Protection against attacks through USB devices in OT and isolated networks) |
Partial coverage |
| op.exp.10 Protection of cryptographic keys |
PKI infrastructure |
| SafeDoor®OT (Secure access to USB storage drives on OT networks) |
Full coverage |
| SafeDoor® OT (Protection against attacks through USB devices in OT and isolated networks) |
Full coverage |
| SafeDoor®OT Secure access |
Full coverage |
| op.ext.1 Contracting and service level agreements |
Certification of the main ICS providers |
|
|
| op.ext.2 Day-to-day management |
Account management |
| SafeDoor®OT (Secure access to USB storage drives on OT networks) |
Full coverage |
| SafeDoor®OT Secure access |
Full coverage |
| SafeDoor® OT (Protection against attacks through USB devices in OT and isolated networks) |
Full coverage |
| op.ext.3 Supply Chain Protection |
Awareness and Training |
|
|
| op.ext.4 Systems interconnection |
Network communication visualization |
|
|
| op.nub.1 Cloud services protection |
Data Protection |
| SafeDoor®OT (Secure access to USB storage drives on OT networks) |
Full coverage |
| SafeDoor®OT Secure access |
Full coverage |
| SafeDoor® OT (Protection against attacks through USB devices in OT and isolated networks) |
Full coverage |
| op.cont.1 Impact analysis |
Risk and Vulnerability Management |
|
|
| op.cont.2 Continuity plan |
Redundancy system, Backup system |
| SafeDoor®OT (Secure access to USB storage drives on OT networks) |
Partial coverage |
| SafeDoor®OT Secure access |
Partial coverage |
| SafeDoor® OT (Protection against attacks through USB devices in OT and isolated networks) |
Partial coverage |
| op.cont.3 Periodic tests |
Upgrade testing support |
|
|
| op.cont.4 Alternative means |
Redundancy system |
|
|
| op.mon.1 Intrusion detection |
Industrial DPI for anomaly detection, Advanced detection of anomalies in the IP layer |
| SafeDoor®OT Secure access |
Partial coverage |
| op.mon.2 Metrics system |
SIEM integration |
| SafeDoor®OT (Secure access to USB storage drives on OT networks) |
Full coverage |
| SafeDoor®OT Secure access |
Full coverage |
| SafeDoor® OT (Protection against attacks through USB devices in OT and isolated networks) |
Full coverage |
| op.mon.3 Monitoring |
Network communication visualization |
|
|
| mp.if.1 Separate and access controlled areas |
Physical security in the installation of devices, Separation of environments |
| SafeDoor®OT (Secure access to USB storage drives on OT networks) |
Full coverage |
| SafeDoor®OT Secure access |
Full coverage |
| SafeDoor® OT (Protection against attacks through USB devices in OT and isolated networks) |
Partial coverage |
| mp.if.2 Identification of persons |
Hardware Security Keys |
|
|
| mp.if.3 Fitting out of the premises |
Physical security in the installation of devices |
| SafeDoor®OT (Secure access to USB storage drives on OT networks) |
Full coverage |
| SafeDoor®OT Secure access |
Full coverage |
| SafeDoor® OT (Protection against attacks through USB devices in OT and isolated networks) |
Full coverage |
| mp.if.4 Electrical energy |
Redundancy system |
|
|
| mp.if.5 Fire protection |
Physical security in the installation of devices |
| SafeDoor®OT (Secure access to USB storage drives on OT networks) |
Full coverage |
| SafeDoor®OT Secure access |
Full coverage |
| SafeDoor® OT (Protection against attacks through USB devices in OT and isolated networks) |
Full coverage |
| mp.if.6 Flood protection |
Physical security in the installation of devices |
| SafeDoor®OT (Secure access to USB storage drives on OT networks) |
Full coverage |
| SafeDoor®OT Secure access |
Full coverage |
| SafeDoor® OT (Protection against attacks through USB devices in OT and isolated networks) |
Full coverage |
| mp.if.7 Entry and exit registration of equipment log |
Equipment protection diagnostics |
| SafeDoor®OT (Secure access to USB storage drives on OT networks) |
Full coverage |
| SafeDoor®OT Secure access |
Full coverage |
| SafeDoor® OT (Protection against attacks through USB devices in OT and isolated networks) |
Full coverage |
| mp.per.1 Job description |
Awareness and Training |
|
|
| mp.per.2 Duties and obligations |
Awareness and Training |
|
|
| mp.per.3 Awareness |
Awareness and Training |
|
|
| mp.per.4 Training |
Awareness and Training |
|
|
| mp.eq.1 Clear workstation |
Equipment use control |
| SafeDoor®OT (Secure access to USB storage drives on OT networks) |
Full coverage |
| SafeDoor®OT Secure access |
Full coverage |
| SafeDoor® OT (Protection against attacks through USB devices in OT and isolated networks) |
Full coverage |
| mp.eq.2 Workstation locking |
Equipment use control |
| SafeDoor®OT (Secure access to USB storage drives on OT networks) |
Full coverage |
| SafeDoor®OT Secure access |
Full coverage |
| SafeDoor® OT (Protection against attacks through USB devices in OT and isolated networks) |
Full coverage |
| mp.eq.3 Protection of portable equipment |
Equipment use control |
| SafeDoor®OT (Secure access to USB storage drives on OT networks) |
Full coverage |
| SafeDoor®OT Secure access |
Full coverage |
| SafeDoor® OT (Protection against attacks through USB devices in OT and isolated networks) |
Full coverage |
| mp.eq.4 Other network-connected devices |
Device control |
| SafeDoor®OT (Secure access to USB storage drives on OT networks) |
Full coverage |
| SafeDoor®OT Secure access |
Full coverage |
| SafeDoor® OT (Protection against attacks through USB devices in OT and isolated networks) |
Full coverage |
| mp.com.1 perimeter security |
Host-based firewall |
| SafeDoor®OT (Secure access to USB storage drives on OT networks) |
Full coverage |
| SafeDoor®OT Secure access |
Full coverage |
| SafeDoor® OT (Protection against attacks through USB devices in OT and isolated networks) |
Full coverage |
| mp.com.2 Confidentiality protection |
Data Protection |
| SafeDoor®OT (Secure access to USB storage drives on OT networks) |
Full coverage |
| SafeDoor®OT Secure access |
Full coverage |
| SafeDoor® OT (Protection against attacks through USB devices in OT and isolated networks) |
Full coverage |
| mp.com.3 Integrity and authenticity protection |
Verification of integrity of software and hardware code |
| SafeDoor®OT (Secure access to USB storage drives on OT networks) |
Full coverage |
| SafeDoor®OT Secure access |
Full coverage |
| SafeDoor® OT (Protection against attacks through USB devices in OT and isolated networks) |
Full coverage |
| mp.com.4 Separation of information flows in the network |
Secure network design |
| SafeDoor®OT (Secure access to USB storage drives on OT networks) |
Full coverage |
| SafeDoor®OT Secure access |
Full coverage |
| SafeDoor® OT (Protection against attacks through USB devices in OT and isolated networks) |
Full coverage |
| mp.si.1 Support marking |
Industrial network event log (forensic analysis) |
| SafeDoor®OT (Secure access to USB storage drives on OT networks) |
Full coverage |
| SafeDoor®OT Secure access |
Full coverage |
| mp.si.2 Cryptography |
PKI infrastructure |
| SafeDoor®OT (Secure access to USB storage drives on OT networks) |
Full coverage |
| SafeDoor® OT (Protection against attacks through USB devices in OT and isolated networks) |
Full coverage |
| SafeDoor®OT Secure access |
Full coverage |
| mp.si.3 Custody |
Equipment protection diagnostics |
| SafeDoor®OT (Secure access to USB storage drives on OT networks) |
Full coverage |
| SafeDoor®OT Secure access |
Full coverage |
| SafeDoor® OT (Protection against attacks through USB devices in OT and isolated networks) |
Full coverage |
| mp.si.4 Transport |
WI-FI control, Network communications control, Network integrity control, Data Protection |
| SafeDoor®OT (Secure access to USB storage drives on OT networks) |
Partial coverage |
| SafeDoor®OT Secure access |
Partial coverage |
| SafeDoor® OT (Protection against attacks through USB devices in OT and isolated networks) |
Partial coverage |
| mp.si.5 Erased and destruction |
Backup Policy |
|
|
| mp.sw.1 Application development |
Software usage control, Verify PLC integrity |
| SafeDoor®OT (Secure access to USB storage drives on OT networks) |
Partial coverage |
| SafeDoor®OT Secure access |
Partial coverage |
| SafeDoor® OT (Protection against attacks through USB devices in OT and isolated networks) |
Partial coverage |
| mp.sw.2 Acceptance and commissioning |
Cybersecurity assessment |
| SafeDoor®OT (Secure access to USB storage drives on OT networks) |
Full coverage |
| SafeDoor®OT Secure access |
Full coverage |
| SafeDoor® OT (Protection against attacks through USB devices in OT and isolated networks) |
Full coverage |
| mp.info.1 Personal information |
Data Protection |
| SafeDoor®OT (Secure access to USB storage drives on OT networks) |
Full coverage |
| SafeDoor®OT Secure access |
Full coverage |
| SafeDoor® OT (Protection against attacks through USB devices in OT and isolated networks) |
Full coverage |
| mp.info.2 Information qualification |
Use control policy |
| SafeDoor®OT (Secure access to USB storage drives on OT networks) |
Full coverage |
| SafeDoor®OT Secure access |
Full coverage |
| mp.info.3 Electronic signature |
PKI infrastructure |
| SafeDoor®OT (Secure access to USB storage drives on OT networks) |
Full coverage |
| SafeDoor® OT (Protection against attacks through USB devices in OT and isolated networks) |
Full coverage |
| SafeDoor®OT Secure access |
Full coverage |
| mp.info.4 Timestamps |
Security log, File integrity monitoring |
| SafeDoor®OT (Secure access to USB storage drives on OT networks) |
Full coverage |
| SafeDoor®OT Secure access |
Full coverage |
| SafeDoor® OT (Protection against attacks through USB devices in OT and isolated networks) |
Full coverage |
| mp.info.6 Backup |
Backup system |
| SafeDoor®OT (Secure access to USB storage drives on OT networks) |
Full coverage |
| SafeDoor®OT Secure access |
Full coverage |
| SafeDoor® OT (Protection against attacks through USB devices in OT and isolated networks) |
Full coverage |
| mp.s.1 E-mail protection |
Network communications control, Host-based firewall |
| SafeDoor®OT (Secure access to USB storage drives on OT networks) |
Partial coverage |
| SafeDoor®OT Secure access |
Partial coverage |
| SafeDoor® OT (Protection against attacks through USB devices in OT and isolated networks) |
Partial coverage |
| mp.s.2 Protection of web services and applications |
Device control |
| SafeDoor®OT (Secure access to USB storage drives on OT networks) |
Full coverage |
| SafeDoor®OT Secure access |
Full coverage |
| SafeDoor® OT (Protection against attacks through USB devices in OT and isolated networks) |
Full coverage |
| mp.s.3 Web browsing protection |
Network communications control, Host-based firewall |
| SafeDoor®OT (Secure access to USB storage drives on OT networks) |
Partial coverage |
| SafeDoor®OT Secure access |
Partial coverage |
| SafeDoor® OT (Protection against attacks through USB devices in OT and isolated networks) |
Partial coverage |
| mp.s.4 Denial of service protection |
Network communications control, Device control, Host-based firewall |
| SafeDoor®OT (Secure access to USB storage drives on OT networks) |
Partial coverage |
| SafeDoor®OT Secure access |
Partial coverage |
| SafeDoor® OT (Protection against attacks through USB devices in OT and isolated networks) |
Partial coverage |
| mp.info.5 Document cleaning |
Backup Policy |
|
|
