ABB REX610 Protection and control functions

- Collect and store backups of system components and keep them up to date

- Remove all unnecessary user accounts

- Define password policies

- Change default passwords and use strong passwords

- Check that strong encryption and authentication is used for links from the substation to higher-level systems

- Separate public (untrusted) from automated (trusted) networks

- Isolate traffic and networks

- Use firewalls and demilitarized zones

- Evaluate systems regularly

- Use malware protection in workstations and keep it up to date It is important to utilize defense-in-depth concepts when designing automated system security. Connecting devices directly to the Internet is not recommended without adequate additional security components. Security controls should be used for the different layers and interfaces in the system. In addition to product features, strong security means enabling and using available features and enforcing their use according to company policy. Proper training of personnel accessing and using the system is also required.