|
Larry Alls, Security Engineering Manager at FoxGuard, recently presented on this topic at the Industrial Control Systems Joint Working Group (ICSJWG) Spring Conference. |
Abstract
When adding, modifying or upgrading a system, many critical infrastructures conduct a Factory Acceptance Test (FAT). A FAT includes a customized testing procedure for systems and is executed before the final installation at the critical facility. Because it is difficult to predict the correct operation of the safety instrumented system or consequences due to failures in some parts of the safety instrumented system, a FAT provides a valuable check of these safety issues. Similarly, since cyber security can also impact safety of critical systems if a system is compromised, it naturally makes sense to integrate cyber security with the FAT, a concept that brings extreme value and savings to an implementation process.
An Integrated Factory Acceptance Test (IFAT) is a testing activity that brings together selected components of major control system vendors and Industrial Control System (ICS) plant personnel in a single space for validation and testing of a subset of the control system network and security application environment in an ICS environment. Conducting an IFAT provides important advantages and benefits including: time savings, cost savings, improved ability to meet compliance requirements, and increased comfort 
level with integrated security solutions.
[By Jerome Farquharson and Alexandra Wiesehan of Burns & McDonnell, partner of CCS-Inc.'s wholly-owned subsidiary FoxGuard Solutions]
