Cybersecurity by Design

Cybersecurity is an integral part of product lifecycles at Hitachi Energy and has been carefully incorporated into our grid automation products and systems for you. Our product organization, responsible for cybersecurity during the product lifecycle, enables products to be designed and developed with comprehensive, cybersecure measures from the outset. Product development processes, as defined in our Security Development Lifecycle program, support cybersecurity by handling requirements, implementing processes according to established reviews and coding guidelines, and verifying security requirements and product robustness. We take multiple steps to deliver reliable, secure solutions for you, including threat modeling and security design reviews, security training for software developers, and in-house and external security testing. Individual user accounts and detailed security event logs are just two examples of built-in security features available in our products.

Hitachi Energy has our own Cybersecurity Assurance Center (CsAC), where all our products undergo state-of-the-art security testing before they are released to the market. This process measures robustness and security integrity and includes port scanning, network flooding, vulnerability scanning, and protocol fuzzing. Centralized security testing ensures a common, best-practice approach and a robust defense against cybersecurity attacks.

Embraced throughout the project lifecycle, the project organization is responsible for the cybersecurity of our system delivery. Project execution embeds cybersecurity within processes during the design, engineering, acceptance testing, and commissioning and maintenance phases. This approach is designed to deliver critical infrastructure solutions with the appropriate security properties and to securely execute projects.

Hitachi Energy’s cybersecure posture during testing and commissioning addresses cybersecurity in lifetime support services and future product adaptations, which includes implementing processes to resolve problems that might arise after product release.

As an extension of our project delivery, we offer security management services for our customers. This consulting service targets system solutions by providing monitoring, management, and response to cyber threats and risks as well as compliance requirements. Working with partners, such as third-party companies that offer security solutions, we deliver advanced capabilities to secure your systems.