Cybersecurity
Advanced Protection for Industrial Infrastructures: Melchioni Electronics' Commitment to Cybersecurity in the Light of the NIS 2 Directive
Cybersecurity
Advanced Protection for Industrial Infrastructures: Melchioni Electronics' Commitment to Cybersecurity in the Light of the NIS 2 Directive
In industry, the cybersecurity threat is increasingly critical, with networks and systems becoming more and more interconnected. Cyber attacks can inflict significant economic damage, disrupting production and compromising vital infrastructure, as well as the potential loss of sensitive data.
It is imperative to take robust cybersecurity measures to protect industrial environments and ensure business continuity. With the entry into force of the NIS 2 Directive on 16 January 2023, as part of the European cybersecurity strategy, the urgency of such preventive measures against cyber attacks has been reaffirmed.
The increasing frequency of attacks is evident, with the average cost of data leaks estimated at $4.45 million, according to IBM studies. Nearly 29,000 CVEs (Common Vulnerabilities and Exposures) were discovered in 2023, a growth of 15 per cent from the previous year, highlighting a continuing upward trend.
In response to these challenges and to meet the standards of the NIS 2 Directive, Melchioni Electronics is committed to providing effective support, in cooperation with experienced partners such as Stormshield and Moxa, to secure industrial infrastructures and protect sensitive data.
Moxa: Industrial Network Security Guaranteed
Ensuring the security of industrial networks is essential for the protection of critical infrastructure. With Moxa's EDS-4000/G4000 series, certified to the IEC 62443-4-2 standard, you can pass rigorous cybersecurity tests. These devices offer versatile functionality to create scalable and resilient networks, facilitating IT/OT convergence.
Features of the EDS-4000/G4000 series include a compact design for space-constrained installations, a Network Visualisation Tool to manage large-scale networks, and a modular power supply system for various applications. With features such as 90-watt 802.3bt PoE and 2.5GbE connectivity, these devices support energy-intensive applications and operate in extreme conditions, facilitating digital transformation.
Moxa addresses security needs in industrial environments by offering IEC 62443-compliant devices such as industrial Ethernet switches, industrial serial device servers, industrial protocol gateways and modular remote I/O. Using a defence-in-depth strategy, Moxa protects networks through secure segmentation, firewalls, IDS/IPS and virtual patching, providing comprehensive protection from cyber threats. In addition, it provides centralised visibility of network states to detect and respond promptly to threats.
Stormshield: Information Security for Critical Infrastructure
Stormshield is a reference in the field of Critical Infrastructure, offering advanced IT security solutions for the ICT IT and industrial sectors, with a particular focus on the needs of critical infrastructures. With the ECSO CYBERSECURITY made in Europe certification and the support of Airbus' Defense & Space division, Stormshield is committed to providing customised support and integrated solutions to ensure maximum security in the industrial environment.
Stormshield's solutions cover a wide range of needs, from network and endpoint protection to data encryption. With products such as Network Security, Endpoint Security Evolution, Data Security and Industrial Offer, the company offers comprehensive, customised protection. Solutions include advanced firewalls, proactive protection for workstations and servers, end-to-end encryption of sensitive data and specific solutions for securing OT networks, addressing the challenges of Industry 4.0 and increasing the security level of control stations.
Insight: NIS 2 Directive and Machinery Regulation
The NIS 2 Directive was introduced to address growing cyber threats and to ensure the security of cross-border data exchanges. Compared to the previous legislation, NIS 2 defines two new categories: Essential Subjects and Important Subjects, including companies operating in Highly Critical Sectors and Other Critical Sectors. This extension of the regulatory perimeter involves various industries, such as the manufacture of medical devices, computers and electronics, machinery and motor vehicles, and digital service providers. The companies identified will have to take technical, operational and organisational measures to manage cybersecurity risks, with the obligations scheduled to come into force on 17 October 2024.
The New Machinery Regulation integrates cybersecurity provisions, focusing on the impact on machine safety and the safety and reliability of control systems. The IEC 62443 standard, already used in the OT to ensure cybersecurity in industrial automation systems, is also a reference point for the New Machinery Regulation. It is scheduled to be implemented in January 2027 and will also extend to areas such as IoT and medical devices, offering detailed guidelines to ensure compliance and safety of systems.