TOSHIBA Introduction~Industrial Control System Security~

Toshiba Digital Solutions Corporation
Toshiba Asia Pacific (Thailand) Co., Ltd.
8 November, 2022

© 2022 Toshiba Digital Solutions Corporation© 2022 Toshiba Digital Solutions Corporation

01
Introduction of Toshibaʼs business domain© 2022 Toshiba Digital Solutions Corporation2

Toshiba Group Business Domains
Energy Systems &Solutions

Systems &InfrastructureSolutions

Digital Solutions

Battery Business

Retail & PrintingSolutions

EnergyElectronic Devices& Storage

Building Solutions

Electronic Devices & Storage Solutions

FY2020
Sales Ratio

Building

Infrastructure

Battery Digital© 2022 Toshiba Asia Pacific (Thailand)3

02
Cyber Security Measures for OT Systems© 2022 Toshiba Digital Solutions Corporation

4

Characteristics of IT systems and OT systems

Different characteristic between IT security and OT security

IT systems

OT systems

Computers, Servers
General purpose products

Industrial Control Systems
Control heat, Monitor systems
Customized systems

Operation ofphysical process

DATA•••••

Enhance security measures
Technical requirement
Increase Security Level
Confidentiality<Availability <Integrity
Operations automation•••••

Enhance adaptability
Operation・Management
Increase Maturity Level
Security<Safety（HSE）
Continue operating during© 2020 Toshiba Corporation5

Risk is increasing for Operational Technology Security.
Businessenvironmentchanges due to theadvancement of DX

・Increased connection
between IT and OTAdvancement ofthreat on
OT systems

Regulation or
Guideline for OTsystems• Change object from
Political to Economic

・Supply chain risks in
Europe, the U.S. andChina tighter
regulations/guidelines

Threat to the OT is
becoming morefamiliar and serious

Shut out of the supply
chain if security
measures are not inplace

・Expanding externalconnections
Increased opportunities
for OT environments toCyberattacks© 2021 Toshiba Corporation6

TOSHIBA Industrial Control System Security Solution & Service
Provide security services from "design and defense" to "evaluation and verification" throughout
the security lifecycle
01

Recognizing & Improving
current status

Maximizing protection

02

Security assessment & Training service

ICS security solution

Security assessment and training based on public standards and guidelines

Simple assessment
Detailed
assessment

04

Compliantassessment

Evaluate/Verify

IT/OT network separation data diode

Education・Training

Legacy equipment remote connection CYTHEMISTM

Minimizing impact

SIRT Service ※3 (security incident response/recovery)
Appropriate response and early recovery in cooperation withRespond/Recover
manufacturing and maintenance departments
Recovery support with an incident occurs
Log analysis
Vulnerability response

OT network visualization anddetection - OT-IDS

Design/Protect

03
Monitor/Detect

Early detection of risk

OT-SOC ServiceSecurity operation monitoring
based on cyber x physical knowledge

24/365 remote monitoring
Detailed alert report and cause analysis
Vulnerability survey periodic report

Toshiba realizes secure infrastructure operation through physical knowledge and OT system operation.
Physical knowledge + OT system operation

Security operations© 2022 Toshiba Digital Solutions Corporation7

Thank you!!

Contact e-maile-mail：https://asean-cbp.org/?page_id=918© 2022 Toshiba Digital Solutions Corporation8