AlienVault Unified Security Management™ (USM) simplifies and accelerates SCADA security with the essential capabilities you need for complete visibility of your assets, vulnerabilities, and threats – all in one centralized console.
Supervisory Control and Data Acquisition (SCADA) and Industrial Control Systems (ICS) are coming increasingly under attack. Consequently, energy and utility companies are under rising pressure to implement cyber security measures to protect critical infrastructure devices and critical application servers from threats.
To unify cyber security standards for ICS and SCADA, the ISA99 / IEC 62443 set of standards has emerged as a framework to compliment NERC CIP and NIST SP800-82.
AlienVault USM™ enables energy and utility companies to detect and respond to threats and meet security requirements of the above-mentioned standards by unifying five essential security components in a single management platform.
AlienVault USM helps secure SCADA and ICS with essential capabilities such as:
Cyber Threat Detection
Integrated Threat Intelligence
Cyber threats come in all shapes and sizes. Targeted and custom attacks against energy and utility SCADA infrastructure are a growing threat.
AlienVault’s USM platform provides a unified approach to threat detection and compliance management that puts complete SCADA security visibility at your fingertips. The USM platform is an all-in-one security management platform that includes essential security capabilities all centrally managed through a single interface to help you secure your critical infrastructure.
These built-in capabilities allow you to answer critical questions relating to the security of your SCADA and ICS, such as what devices are on your network, which assets are vulnerable to attack, and which of these devices are communicating with known malicious IP addresses. AlienVault USM will automatically alert you when there is malicious activity in your network and when your users are violating policy.
SCADA security is difficult to achieve in accordance with the guidance provided by ISA99 / IEC 62443. This is a series of standards, technical reports, and related information that define procedures for implementing electronically secure Industrial Automation and Control Systems.
Even with large teams, the number of alerts generated can be overwhelming and can result in critical threats being overlooked.
This can be a daunting challenge for organizations, particularly when it comes to trying to detect threats by manually collecting and correlating security events from disparate security point-products.
AlienVault USM does the heavy lifting for you. Correlating and analyzing events from its built-in data sources to identify the most important threats. The Cyber Kill Chain Taxonomy feature provides a prioritized, at-a-glance view of threat activity in your network and eliminates the need for you to investigate every alert.
To help you stay ahead of the evolving threat landscape against SCADA and ICS in the energy sector as well as meet ISA99 / IEC 62443 requirements, you need threat intelligence that enables you to quickly detect, prioritize and eliminate danger to your network.
AlienVault Labs delivers continuous updates to rulesets as well as threat data from Open Threat Exchange (OTX) the world’s largest community-powered threat sharing platform. These updates enable USM to stay current with the latest Indicators of Compromise (IOC), allowing you to more easily identify emerging threats targeting your network and infrastructure, such as: