Defence-in-depth security model punted for protecting industrial assets

Protecting industrial assets requires a defence-in-depth (DiD) security approach that addresses in-house and external security threats. The approach uses multiple layers of defence, including physical, electronic and procedural protection, and at separate instances by applying appropriate controls that address different types of risks. A good security programme is 20% technology and 80% process and procedure. These processes and procedures, along with a company’s employee policies, are categorised under the nontechnical side of security, says automation multinational Rockwell Automation sub-Saharan Africa software and control systems business manager Christo Buys.