Edit Place Overview Page

Choose a layout and drag widgets onto your Overview Page to customize it. Widgets placed on the page below can be configured by selecting the symbol.

Dismiss this customization messageDon't show me this again.

All Places >

Security

Actions

About Security

Overview
Content
People
Projects
Events
More

Share group

Manage

Security Links

Loading...

Ethical Disclosure Policy

PI Security Tech Support

YouTube: Securing PI

Recently Joined

Loading...

AndyILOTT Joined Mar 21, 2018
jbishop Joined Feb 12, 2018
tugcuf Joined Nov 30, 2017

View all members

Welcome to the OSIsoft Security Group!

Loading...

This user group is here to exchange information and best practices related to mitigating security risks and tightening security. We hope to share and learn. We will be making regular posts about PI System security. If you would like to be notified about new posts, please Follow this site or join the group. We look forward to your feedback. And please, feel free to share your thoughts and questions through your own blogs or status posts.

Ask Security

Loading...

Ask a question in this group

Loading...

Recent Activity

Filter

Set as default view

Filtered by:All Items

Brian

in Security2 weeks ago (Show more Show less)

Interested in attacking the PI System? Come to S4!

We share this special invitation to the Digital Bond S4x19 ICS Security Conference sponsored by OSIsoft, LLC. The S4x19 conference is taking place in Miami Beach, January 15-17, 2019. The three-day event brings together the top researchers, thought leaders and influencers in the industrial control system (ICS) community to discuss advance… (Show more Show less)

in SecurityLike Show 6 Likes(6)

0 comments

hpaul

in Security2 years ago (Show more Show less)

Check out the PI Security Audit Tools on GitHub

In an effort to demystify PI security and help our customers assess the security posture of their systems, we’ve developed a tool to help baseline the security configuration of PI System components in the form of a PowerShell module. The tool performs validation checks for the machine, PI Data Archive, PI AF Server, SQL Server and PI Coresight,… (Show more Show less)

in SecurityLike Show 16 Likes(16)

13 commentsShow more activityShow more activity

taterhead247 (to hpaul) 4 weeks ago (Show more Show less)

Harry Paul, thanks for the quick response, sounds like an easy win. I think I'm going to go with Option 2 and wait for the next signed release. It's not an emergency on our side. And thanks for the tip on DSC. At first glance I have no idea how that works or how to use it. But it looks like there are a lot helpful links on the github site…

Like Show 0 Likes(0) Actions

Brian

in Security2 months ago (Show more Show less)

Security Workshop in D.C.

Coming this month on August 21-22, OSIsoft is hosting a Super Regional Seminar. This is a special two day event taking place in Washington D.C. There will a be a good mix of talks on our product roadmap, customer stories as well as guests speakers from the Department of Energy (DoE) and the Nation Institute for Standards and Technology (NIST). … (Show more Show less)

in SecurityLike Show 2 Likes(2)

0 comments

Shared by hpaul

from Harry Paul's Blog2 months ago (Show more Show less)

Configuration as Code for PI System Security: Introducing PI Security DSC

As a PI System administrator, do you want to: use the same mechanism to secure both the OS and the applications running on it? maintain a baseline across numerous nodes and sites? have functional documentation that allows you to both apply and verify your configurations? The Customer Success Cyber Security Champions have created the PI… (Show more Show less)

0 comments

aivanova

in Security2 months ago (Show more Show less)

Standard ISO/IEC 27032:2012 and PI System

Dear all, Some our customers and sales people ask if PI system meet requirements of the standard ISO/IEC 27032:2012 (https://www.iso.org/standard/44375.html ) and if yes, can we get some sort of proof (certificate, OSIsoft statement etc.). Your help would be highly appreciated!

in SecurityLike Show 0 Likes(0)

1 replyShow more activityShow more activity

Bryan Owen

(to aivanova) 2 months ago (Show more Show less)

About standards... ISO 27000 series and NIST 800 series documents are organized as a loose 'family' of standards, guidelines and technical reports. Standards often reference each other and not all standards are intended as auditable nor offered with a formal certification regimen including ISO/IEC 27032:2012. ISO/IEC 27032 seems an unlikely…

Like Show 0 Likes(0) Actions

hpaul

in Security6 months ago (Show more Show less)

Cyber Activity Targeting Energy and Other Critical Infrastructure Sectors

US-CERT released the alert, Russian Government Cyber Activity Targeting Energy and Other Critical Infrastructure Sectors, on Thursday, March 15th. The technical alert includes indicators of compromise (IOCs), technical details on the tactics, techniques, and procedures (TTPs) used by the actors, and security best practices relevant to the… (Show more Show less)

in SecurityLike Show 6 Likes(6)

3 commentsShow more activityShow more activity

Bryan Owen

2 months ago (Show more Show less)

Major media outlets this week are rehashing stories about hacking into power grid control centers citing this DHS and FBI alert published in March. Although headlines frequently sensationalize what is really happening, security of the power grid is a serious concern. Please take a moment and share our analysis above with your security team.

Like Show 1 Like(1) Actions

Shared by Bryan Owen

from Bryan Owen's Blog2 months ago (Show more Show less)

Cyber Security 'Near Misses'

Glenn Aydell's "Cyber Security and the Chemical Sector" presentation at the 2018 SANS ICS Summit provides a great collection of near misses. Learning from near misses is a critical step in most safety programs and a hallmark of mature communities dedicated to industrial safety. The same is true for cyber security. Check out Glenn's presentation… (Show more Show less)

0 comments

Shared by Bryan Owen

from Bryan Owen's Blog4 months ago (Show more Show less)

5-Jun-2018 Critical Infrastructure and IT/OT Integration

Although lot has already been written about IT and OT integration there is so much more to share. So I jumped at the chance to represent a supplier’s perspective on Critical Infrastructure Protection and IT/OT integration at a recent seminar in Tokyo. The seminar provided 360 degree viewpoints on IT/OT integration with featured speakers from:… (Show more Show less)

0 comments

Shared by Brian

from Configuring PI Data Archive Security4 months ago (Show more Show less)

Additional Resources for PI System Security

Looking for additional resources for security? Learning resources: Check out the different learning paths to find the right training materials for you! Hands-on Labs: 2017 Hands-on Lab: Extending the PI Security Audit Tools to Meet the Needs of Your Environment UC 2017 Hands-on Lab: Locking Your PI System Without Locking Down Your PI… (Show more Show less)

0 comments

jkim mentioned Security 4 months ago Show mention context Hide mention context

Additional Resources for PI System Security

jkim mentioned Security 4 months ago

Load more items

Recent Content Tagged with Security

Loading...

Upcoming Events

Loading...

You can't create events here, but watch for events you might be interested in.

Popular Tags

Loading...

administration
audit
conference
coresight security
cyber_security
digital bond
github
ot security
pi security
pisecurityaudit
powershell
s4x17
security
security cybersecurity
windows_server_core

View all

Actions

Loading...

Group feeds

Edit Place Overview Page

Manage

Security Links

Featured Content

Recently Joined

Welcome to the OSIsoft Security Group!

Ask Security

Recent Content Tagged with Security

Upcoming Events

Popular Tags

Actions