Wärtsilä looks to add security on IT and OT systems

Wärtsilä has chosen cyber-risk management firm Tenable’s Tenable OT Security platform to manage its OT asset inventory collection. Using the Tenable OT Security platform, Wärtsilä said it will be able to address customer questions around asset delivery, reducing supply chain risks and taking a proactive stance on cyber security. 

The Tenable service will also be extended to Wärtsilä’s customers, allowing them to visualise their own OT environments.

According to Tenable, Wärtsilä is seeking to address three key challenges: automated asset inventory collection, compliance reporting and OT vulnerability reporting.

Previously, this was a manual collection process, with the data being reported using spreadsheets and susceptible to errors and inconsistencies both in the way it was collected and reported.

“We tested multiple tools and found Tenable OT Security to have great discovery via vendor specific protocols. The workflow of the tool was a great fit for our own needs but, beyond that, we realised using the solution allowed us to develop and introduce new services to benefit our customers, too,” Wärtsilä cyber security expert Ross Bailey said. 

Tenable OT Security is a modern industrial security platform allowing users to identify assets, communicate risk and prioritise action all while enabling its IT, security and OT teams to work better together.

The detail provided includes firmware versions, serial numbers, anomalous network activity and will let Wärtsilä report more accurate and consistent information to customers about their OT environment including information about current project delivery while also detailing cyber risks within their environments allowing customers more proactive risk management.

Tenable general manager of OT, Amir Hirsch noted that as OT networks continue to grow more complex, it introduces new risks to be addressed.

He said, “Understanding the nuances within the organisation and broader industry, is key to implementing an effective OT security strategy. All teams – those tasked with securing IT and OT – should have complete visibility of the entire infrastructure and relevant interdependencies. This means knowing exactly which assets exist, their configurations and full situational awareness of both sides of the house, empowering the security team to see and understand the big picture.”

Sign up for Riviera’s series of technical and operational webinars and conferences in 2023:

• Register to attend by visiting our events page.
• Watch recordings from all of our webinars in the webinar library.