Project Description

Follow PDO specific DCADA System Hardening measures for all Control Systems Servers, Operator and Engineering Workstations at site. This included recording all systems and software attributes including licences and installed software and conducting intrusion impact awareness training with all users in the PDO assets.

Technical Details & Specifications

PDO DEP 32.01.20.10 - Data Acquisition & Control Architecture (DACA)
PDO DEP 32.01.21.10 - Data Acquisition & Control Architecture (DACA) - Roles and responsibilities
PDO DEP 32.01.22.10 - Data Acquisition & Control Architecture (DACA) - procedural controls - Configuration management
PDO DEP 32.01.22.11 - Data Acquisition & Control Architecture (DACA) - procedural controls - Backup and restore
PDO DEP 32.01.22.12 - Data Acquisition & Control Architecture (DACA) - procedural controls - Incident management
PDO DEP 32.01.22.13 - Data Acquisition & Control Architecture (DACA) - procedural controls - Disconnection procedure
PDO DEP 32.01.23.11 - Data Acquisition & Control Architecture (DACA) - Technical controls - Infrastructure architecture
PDO DEP 32.01.23.12 - Data Acquisition & Control Architecture (DACA) - Technical controls - Remote user access
PDO DEP 32.01.23.13 - Data Acquisition & Control Architecture (DACA) - Technical controls - Wireless security
PDO DEP 32.01.23.14 - Data Acquisition & Control Architecture (DACA) - Technical controls - Minimal access
PDO DEP 32.01.23.15 - Data Acquisition & Control Architecture (DACA) - Technical controls - Authentication and authorisation
PDO DEP 32.01.23.18 - Data Acquisition & Control Architecture (DACA) - Technical controls - PCD network drawings
PDO DEP 32.01.23.19 - Data Acquisition & Control Architecture (DACA) - Technical controls - Architectural requirements for applications utilising production data
PDO DEP 32.01.25.10 - Data Acquisition & Control Architecture (DACA) - System security - Virus management
PDO DEP 32.01.25.11 - Data Acquisition & Control Architecture (DACA) - System security - Patch management
PDO DEP 32.01.26.11 - Data Acquisition & Control Architecture (DACA) - Assurance - Risk assessment

Deliverables

Site Survey
Audit Report
System Hardening
Training