This document discusses the need for zero tolerance when protecting industrial control systems and critical infrastructure. It notes that interruptions to infrastructure in major cities can have massive economic impacts. Effective protection of industrial control systems requires surviving harsh environments, securing unique programming languages and commands, and anticipating cyber attacks. The document advocates for comprehensive protection across information technology and operational technology environments.

1. ©2015 Check Point Software Technologies Ltd. 1
ZERO TOLERANCE
When it comes to protecting your critical infrastructure,
even small failures have huge consequences

2. ©2015 Check Point Software Technologies Ltd. 2
Industrial Control Systems (ICS) Are All Around Us
… and we rely on it every day for our basic functions and needs.
Shipping Traffic ControlFirst Responder Dispatch
Water Treatment Power Transportation
[Protected] Non-confidential content

3. ©2015 Check Point Software Technologies Ltd. 3
Impact of Critical Infrastructure Interruptions
Megacities like New York, Tokyo,
London, Paris rely daily on their
infrastructure:
• Home to 6.7% of world population
• Use 9.6% of global electricity usage
• Produce 12.6% of global waste
Economic impact per day for NYC:
• $3.6 Billion lost revenue

4. ©2015 Check Point Software Technologies Ltd. 44©2014 Check Point Software Technologies Ltd.
Zero Tolerance
for ICS
downtime of any kind
[Protected] Non-confidential content

5. ©2015 Check Point Software Technologies Ltd. 5
The Zero Tolerance Environment
SCADA Environments
SCADA Worlds

6. ©2015 Check Point Software Technologies Ltd. 6©2015 Check Point Software Technologies Ltd. 6©2015 Check Point Software Technologies Ltd. 6[Protected] Non-confidential content
Unique ICS Traits
Survival in Harsh Environments
Unique SCADA Languages
Basic Commands
Large Mechanical Controls
Large Scale Deployments

7. ©2015 Check Point Software Technologies Ltd. 7
OT Security Blueprint
Management Facility
Shop Floor Shop Floor
Control &
monitor
SCADA
Historian
SCADA
VPN
PLC1 PLC2 PLC3 PLC4
Main
Control
Center
Control
Monitor
SmartEvent
[Protected] Non-confidential content

8. ©2015 Check Point Software Technologies Ltd. 8
Full IT-OT Convergence Blueprint
[Protected] Non-confidential content

9. ©2015 Check Point Software Technologies Ltd. 9
Zero Tolerance Means Anticipating Attacks for
IT and SCADA/ICS Equipment
Spear Phishing USB/CD Attacks Targeting Contractors
Free USB Stick
or Music CD
The ‘Symposium’
Spear Phishing
Vendor Access
Credentials
800 Just the IT patches released
in first six months of 2015
[Protected] Non-confidential content

10. ©2015 Check Point Software Technologies Ltd. 10
How would you grade your
Industrial Control Systems
protection?

11. ©2015 Check Point Software Technologies Ltd. 11
Summary
Protecting industrial control systems should
mean Zero Tolerance for mistakes
Hardware that can survive is crucial
Protection is all about capacity and
depth of coverage
[Protected] Non-confidential content

12. ©2015 Check Point Software Technologies Ltd. 12
ZERO TOLERANCE
When it comes to protecting your critical infrastructure,
even small failures have huge consequences
Download the Report to
See How Your Solution
Scored