Cybersecurity is an integral part of our systems and products
Cybersecurity has become a principal factor in the overall digital/automation risk management for paper industry. With the increased technologies interconnections in IT/OT/IIoT system and legislation for security from worldwide customers, cybersecurity vulnerabilities present a substantial risk for industrial security and business continuity in an interconnected environment. Effective cybersecurity safeguards the protection of these crucial services supports business continuity and maintain regulatory compliance, safeguards sensitive data, and prevents damage to critical machinery and processes.
Voith provides secure program to help our existing and future business. Voith has established the basic policy and measures criteria for secure control of products. By implementing them in product development processes, Voith is striving to eliminate vulnerabilities from products and improve security posture. We define a system lifecycle to be the entire period from product development to system introduction and operation.
Product security
Vulnerability handling policies
Patches and vulnerabilty updates
Lifecycle & product end of support
Important notification
Security advisory report
Third party risk
Security program & services
Comprehensive cybersecurity of paper machine
Awareness training
Managed services
Risk assessment
Challenges - Solutions - Benefits
Voith, the leading full-line supplier to the paper industry, is reaffirming its commitment to cybersecurity as an integral part of its systems and products. The global technology company has taken comprehensive measures to enable data security along the entire value chain and ensure production efficiency.
- As the leading full-line supplier to the paper industry, Voith is actively committed to cybersecurity and integrates it as an integral part of its systems and products.
- The entire value chain is protected through certified product development, extensive security measures and compliance with legal requirements from NIS2 & CRA and standards such as IEC 62443, ISO 27001 and GDPR.
- With a secure IT infrastructure and cloud-based solutions from Voith, paper manufacturers can increase the integrity, confidentiality and availability of their data.
Customers challenges
Malicious cyber-attackers target plant and automation systems.
- Malicious attackers are starting to focus on machine and automation systems.
- Cyber-attacks on control systems are increasing.
- Customers want to introduce more secure digital IT/OT & IIoT products in machinery are to enhance process efficiency.
We provide secure paper machine/control products and services
By integrating industrial cyber data security into its products and services from the outset, Voith enables its customers to focus on their core business. Comprehensive compliance, data protection and a trusted and secure industrial IT infrastructure protect operations from unauthorized physical and digital access. Voith has received several certifications that demonstrate its high level of security expertise. The requirements of the standards apply not only to the company itself, but also to Voith’s suppliers.
Our ongoing commitment to industry-leading security standards
Compliance with standards such as IEC 62443, ISO 27001 and GDPR
The IEC 62443 cybersecurity standard relates specifically to industrial automation and control systems such as DCS, process control systems and automation networks. Voith also complies with the ISO 27001 cyber security standard, which forms the basis for an effective information security management system. This ensures that the security of information and data at Voith and its business partners is guaranteed. Another important aspect of security at Voith is compliance with the European Union's "General Data Protection Regulation" (GDPR) to ensure that personal data is protected in accordance with strict data protection regulations. Voith also complies with the EU Cyber Resilience Act (CRA). In addition to cybersecurity, Voith also attaches great importance to the quality of its products and services. The company complies with the ISO 9001 quality standard, which defines the requirements for an efficient quality management system.
Introduce the Secure Systems Development Lifecycle (SSDLC)
Secure Development Life Cycle (SDLC)
The SDLC is Voith’s process for developing secure system products in accordance with IEC 62443-4-1. Its purpose is to develop products that do not contain vulnerabilities. The SDLC consists of six phases. We develop secure products by minimizing vulnerabilities in the outputs of each phase and identifying vulnerabilities early in the development phase.
Additionally, the risk assessment is also performed during early development and also during implementation/commissioning and as well as for services.
Voith PSIRT provides Voith product vulnerability support
Product Security Incident Response Team (PSIRT)
Voith PSIRT provides Voith product vulnerability support. As a focal point, Voith PSIRT leads and manages vulnerability information of Voith’s products together with Voith’s internal and external organizations.
- Publishing security vulnerability reports
Voith PSIRT publishes security vulnerability reports of Voith’s products through security advisories which contains affected products, measures, and relevant information. - Obtaining information on suspected security vulnerabilities
Voith PSIRT obtains information on suspected security vulnerabilities from vulnerability information reporters such as security researchers and customers.
Voith Security Advisory Report
Voith Security Advisory Report (VSAR)
Voith VSAR provides Voith Security Advisory Report.
Cyber policies & procedures
Principles
- Develop products that are built to be resilient both in the present and for the future.
- Safeguard that our products fulfill or surpass the cybersecurity standards set by their specific legislative contexts.
- Product cybersecurity states to the capability of our products to be resilient to cybersecurity threats throughout the product’s life.
- Our products are Secure-by-Design. Security is designed-in rather than bolted-on.
- We deliver Defense-in-Depth, harnessing multiple defense mechanisms to provide multi-layered protection.
- Our approach to product cybersecurity is proportionate and risk-based, reconciling functionality and performance with appropriate levels of protection.
- Our security measures are designed to prevent product safety from being compromised as a result of security threats.
Contact us
Do you have a question or need advice? We are always happy to help! Please send an email or give us a phone call. Together we will find the right solution for you and your application.
t +49 7321 37 2222
Ulf Grohmann
Product Security Officer
J.M. Voith SE & Co.KG St. Pöltener Straße 43 89522 Heidenheim, Germany
t +49 173 6778 364 Send an email
Voith Paper on Social Media
Voith Paper Newsletter
Always get the latest updates on new products and services, projects, campaigns and success stories as well as upcoming exhibitions and conferences – straight to your inbox.
Subscribe now