Bently Nevada
Cyber Asset Protection (CAP)

2nd
Energy is a top target for cyberattacks, the second mosttargeted industry worldwide1

22%
Outdated and unpatched software
constitutes 22% of security issues2

29%
Patch management can reduce
your attack surface up to 29%3

Bently Nevada’s Cyber Asset Protection (CAP) subscription for System 1 provides customers withcyber security best practices for patching and defending System 1 Servers and Clients using patch
management and antivirus/host intrusion protection. CAP includes tested, documented, scripted
and securely delivered Windows® and antivirus patches on a monthly basis for System 1 Serversand Clients saving time and providing additional cyber security threat management capabilities.
Why Patching is Critical

The Importance of Validation

Patching systems is one of the best things to do to protect
assets. It ensures the operating systems and programs running
are updated to provide the latest security protection. Listed as
two of the “First Five Quick Wins” by The SANS Institute, a wellrespected authority on information security and cyber security
training, patching of application and system software is critical toimproving and maintaining a robust security posture.

With validated patch management, the updates are validated
in a secure lab that mimics the plant environment in order toidentify any incompatibilities that may exist before the patch
is applied to a live production system. This allows operators
to safely and confidently patch their systems, ensure uptime
is not compromised, and protect systems against cyberthreats without having to create simulators themselves.

BHCS34325 (10/2020)

Cyber Asset Protection (CAP)How It Is Delivered

Validated Cyber Security for System 1 Software that includes
the following supported components:

Delivered via the Bently Nevada Software License Portal(download approved ISO’s) and Off-line Secure Delivery(hash validation and digitally signed).

System 1 Validation
Latest two versions of System1 v6.9x
Latest three versions of System 1 20.x or newer

The Validation and Testing Process
Windows® Validation
Windows® Server Operating Systems (2012 R2-2019)
Windows® 10 Professional 2004 and 20H2 MicrosoftExcel® (2016 32-bit)
Microsoft SQL® Server (2016 and 2019)
Antivirus Validation
Antivirus Updates (Symantec, McAfee)
McAfee AV definition will be in both *.Exe and *.DAT formats tosupport standalone and centralized deployment.

Supporting Documentation
Work Instructions for issues found during validation such as
new deployment scripts and modification instructions.

Interrogation Testing Criteria
Each update baseline is defined to meet regulations andstandards such as NERC CIP, NEI 08-09, and IEC 62443.
The same testing process is followed for all updates
involved.
Benefits of Validation
Patch files are tested to ensure system integrity and any
unresolved patch issues are communicated via a TechnicalInformation Letter (TIL) prior to being deployed in a
production system.

What’s IncludedBently Nevada works directly with vendors, such as
Microsoft, Symantec, and McAfee to resolve patch issues
with System 1 Software.

CAP Program Documents
Important information about the components of CAP
software updates as well as process instructions andreports.

Validated patching in a test environment prior to deployment
provides system reliability peace of mind.

Compliance/Documentation
Documentation to assist with compliance (NERC CIPs, NEI,etc), system design, reliability, and configuration baseline
documentation; ports, services and hardening.
Monthly updates are documented and scripted for operatingsystem, applications and anti-virus signatures.
SupportAccess to Bently Nevada Technical support team for CAPrelated questions which will be addressed by the cybersecurity support team.

How It Helps

Baker Hughes Support for Regulations andStandards-A Trusted Partner for Compliance
As a vendor of industrial controls, Bently Nevada embraces
its responsibilities to assist critical infrastructure owners toimprove their security postures and support adherence toindustry standards.
Bently Nevada aligns to multiple best practices frameworks
and standards, and helps customers meet regulations suchas NERC CIP, NEI 08-09, and IEC 62443.

ProductsValidated patching protects System 1 Servers and clients,
the most vulnerable point of the system.
Minimizes risk and downtime by ensuring updates are tested
in a customer simulated environment with 3rd party
validation to correct issues before delivery and accelerate
your change management approval process.
Supports Reporting Requirements
Provides an up-to-date and cumulative inventory ofapplicable updates and their status.

Copyright 2021 Baker Hughes Company. All rights reserved.
BHCS34325 (10/2020)

1 https://www2.deloitte.com/insights/us/en/industry/oil-and-gas/ cybersecurity-in-oil-andgas-upstream-sector.html
2 https://www.bulletproof.co.uk/industry-reports/Bulletproof%20-%20
Annual%20Cyber%20Security%20Report%202019.pdf
3 https://ics-cert.us-cert.gov/sites/default/files/documents/Seven%20
Steps%20to%20Effectively%20Defend%20Industrial%20Control%20
Systems_S508C.pdf