Secure remote access for digital automation systems

先进的数字自动化系统可以为工业制造商提供有据可查的好处，包括提高生产力、提高资源使用效率和降低环境排放。为了保持这些优势，自动化系统需要支持和维护。通常，这种支持依赖于对系统的物理访问，通常由需要前往工业现场的经验丰富的工程师提供。远程访问有可能显著提高支持工程师的生产力，从而提高制造现场的性能。通过消除前往偏远地区的需求，支持公司和跨国运营商的集中工程团队可以减少对环境的影响，提高生产力和效率，并增加员工的包容性。新型冠状病毒肺炎（COVID-19，即2019冠状病毒病）大流行显著放大了这一优势。然而，与物理隔离的控制系统域相比，提供对工业控制系统的远程访问带来了相关风险。该项目将产生一个安全远程访问的参考体系结构。然后，对该架构进行详细和严格的风险评估，目的是为制造流程的操作人员提供适当的参考设计，以正确配置其系统架构和程序，并指导如何评估和减轻与其自身安装相关的风险。

Advanced digital automation systems can provide well documented benefits to industrial manufacturers in terms of increased productivity, improved resource use efficiency and lower environmental emissions. In order to sustain these benefits the automation systems require support and maintenance. Typically, this support relies on physical access to the systems, often provided by experienced engineers who need to travel to the industrial site.Remote access has the potential to increase significantly the productivity of support engineers and as a result enhance the performance of the manufacturing sites. By eliminating the need for travel to remote locations, support companies and multi-national operators with centralised engineering groups can reduce their environmental impact, increase productivity and effectiveness and increase employee inclusivity. This benefit is amplified significantly by the Covid-19 pandemic.However, providing remote access to industrial control systems brings associated risk compared with a physically isolated control system domain. This project will generate a reference architecture for secure remote access. It will then subject this architecture to a detailed and rigorous risk assessment.The goal is to provide an appropriate reference design for the operators of manufacturing processes to properly configure their systems architectures and procedures as well as guidance on how to assess and mitigate the risk associated with their own installations.