Cyber security is not an after thought
As the maritime industry advances in leveraging digitalization, connectivity, and automation, a host of new cyber security challenges and requirements have arisen. Vulnerabilities are everywhere, in the cloud or or an unprotected USB port onboard. The problem all cybersecurity strategies face is that to be effective, they must ensure all levels are safe, from component to vessel, from encryption to cloud storage, and from network to organization.
MAN Energy Solutions has a strong and recognized record of accomplishment of delivering mission critical mechanical and automation solutions for the maritime and power sectors, the oil and gas sectors and industries sector. In keeping with that record of accomplishment, we have likewise committed to the development and delivery of secure and reliable digital solutions for our customers.
We understand that keeping both data and services cyber secure is critical to your business. The delivery of secure services is a critical task, not to be taken lightly.
Secure against cyber risks
Your cybersecurity is our highest priority. Our digital eco-system is designed to protect your company’s sensitive information as well as all asset related data. We help you shield your network against cyber attack to keep your staff and equipment safe while also lowering the risk of service disruptions. Our layered security approach consists of the following layers:
- Physical security
- ATU security
- Data communications
- Secure development
- Threat monitoring
- Governance and control
Physical security and data location
MAN CEON is the new backbone of our developing digital-service business. It enables the efficient collection, storage and evaluation of data collected by sensors on the equipment. Data from your assets are encrypted and stored in highly secure data centers that comply with industry-relevant regulations. All data flowing across the global network that interconnects data centers and regions is automatically encrypted at the physical layer before it leaves our secured facilities. Security guards, fencing, security feeds, intrusion detection technology, and other security measures are used at the perimeter layer. Physical access is logged, monitored, and retained.
Secure Edge Hardware
MAN Energy Solutions Edge Hardware (ATU) is responsible for capturing and processing machine generated data from your engine. This hardware contains several security features including a unique identity to ensure the integrity of the data and detect device tampering. The operating system and hardware are further hardened to prevent unauthorized access.
Once the data is captured, it is encrypted and transmitted to our Secure Data Center.
Secure development
When delivering new features and services or making changes within our digital eco-system, we follow a software development lifecycle (SDLC) process. This allows us to deliver high quality services and meet security requirements.
Security requirements originate from a combination of legal, industry-specific regulations and customer needs. Security requirements are embedded and measured throughout the services lifecycle and include third party security audit and penetration tests, security scanning and testing of source code (SAST), and manual testing.
We test our software to ensure resilience against threats as defined by OWASP10 and SANS25. We also use third party data centers, which are audited for strict compliance. The following is a partial list of assurance programs with which our supplier complies with:
- SOC 1/ISAE 3402, SOC 2, SOC 3
- FISMA, DIACAP, and FedRAMP
- PCI DSS Level 1
- ISO 9001, ISO 27001, ISO 27017, ISO 27018
Monitoring and event management
MAN Energy Solutions uses a portfolio of technology to continuously scan and monitor for cyber threats and vulnerabilities. Our Platform Operations, DevOps and Cybersecurity teams take care to ensure a safe and secure environment.
Governance and controls
MAN Energy Solutions ensures that our team members are security awareness trained and comply with our comprehensive cyber security policies, procedures and guidelines. Team members are screened as part of our hiring process to make sure we hire talent who fits the job and will take pride in providing excellent services to you as our customers. Team members and third party consultants have signed confidentiality agreements. Access to your data is limited to a "need to know" approach.
Attain peace of mind with MAN PrimeServ
We see data as the connection linking eco-systems of technologies and organizations, our APIs allow customers to open new pathways for innovation and growth. By letting MAN PrimeServ handle the data you can focus on strengthening your competitive edge.
Connecting your vessel to PrimeServ Assist enables flexible, scalable and easy access to your asset data with the highest security standards. We ensure secure data collection and storage as well as instant technical support and easy data integration with APIs.
MAN EngineVault is the premiere answer to the increasing problem of cyber attacks. Its security components completely protect your engine network, including data and hardware. You are protected from attacks via internet or via infected USB drives or other physical media. MAN EngineVault also has an automated security update service that ensures the highest cybersecurity levels and warns the user about incoming attacks, 24/7.
Discover our digital two-stroke solutions
Overridable power reduction to comply with carbon intensity indicator (CII). It is designed to lower the energy efficiency index for existing ships (EEXI) by limiting the engine power to comply with IMO regulations.
#retrofit
Discover our digital four-stroke solutions
SaCoS5000
Evolution of the well-known SaCoSone control system with proven reliability, robustness, tailored functionality for the demands of MAN engines and extended safety features.
#newengine
Contact our experts
Don't be caught unprotected
We thwart hackers, keep your information safe and ensure that your service is uninterrupted.
Discover products and solutions that support your needs best
Explore our digital eco-system
Exciting things are coming. Stay tuned.
Continue reading
Related news
T-Systems brings MAN Energy Solutions into the cloud
T-Systems is migrating MAN Energy Solutions' entire IT infrastructure and will operate it in the cloud: Telekom's IT service provider is transferring the SAP base system and SAP applications to the Microsoft Azure public cloud. T-Systems will also transfer and support various other applications to the public or hybrid cloud as required. In this way, the provider of solutions for the decarbonization of shipping, the energy sector and industry is creating a flexible and scalable IT organization for its 14,000 employees at more than 100 international locations.
“MAN Energy Solutions' IT organization is undergoing a technological transition to meet the huge demands that come with the company's growing decarbonization and digitization portfolio,” said Ireneus Tomczyk, Group IT CIO at MAN Energy Solutions. “We achieve the flexibility and scalability required for this by fully migrating our IT infrastructure to the public or hybrid cloud and integrating the experience and scalable capacity of our partner T-Systems. Close collaboration between MAN Energy Solutions IT and T-Systems based on agile methods is required to enable this integration.“
“T-Systems is an independent multi-cloud service provider with a great deal of experience,” explained Adel Al-Saleh, member of the Telekom Board of Management and CEO of T-Systems. „That's why we can tailor cloud solutions for any workload individually to each customer – private cloud, public cloud and hybrid cloud. We use the Google, AWS and Azure hyper-scalers as well as our Open Telekom Cloud and our Private Future Cloud Infrastructure based on VMware. T-Systems offers everything from a single source: from cloud migration to SAP development and operation to application management services.“
The building blocks in detail
T-Systems' solution is based on four building blocks for infrastructure and services: an on-premise private cloud and public cloud managed services, as well as SAP managed service in the public cloud and services for non-SAP applications. In addition, T-Systems provides operation and management of the applications as well as an overarching service management and governance structure.
Documents
-
MAN ES_PR_T-Systems_ENG
Contact
Jan Hoppe
Head of Group Communication & Marketing
Group Communications & MarketingMAN Energy Solutions SEStadtbachstr. 186153 AugsburgGermany
Jan.Hoppe@man-es.com t +49 821 322 3126Available languages
- DE ·
- EN
Get notified about press releases
Related articles
-
Ethical hackers
MAN Energy Solutions takes a security-first approach to their products, employing ethical hackers like Felix and Nico Lindner at Recurity Labs to uncover vulnerabilities throughout the development and operation of their products.
-
Learning from machines
The autonomous operation of turbomachinery, assisted by machine learning and remote diagnostics, will boost efficiency and help decarbonization.
-
Energy management for a smart planet
As power systems become more complex, here’s how industries can manage future energy needs.
-
Commissioning goes digital
When the pandemic forced engineers off site, they launched a historic remote commissioning operation.
-
Why digital experts love industry
Young professionals on working at the frontline of digitalization in mechanical engineering.
-
Augmented reality for Canadian seafarers
Spend an hour inside the Royal Canadian Navy’s virtual reality training for their new patrol ships.
-
Automated subsea platform for deepwater compression
The world’s first subsea compression system has revolutionized oil exploration; learn how automation and digitalization make it cleaner and more efficient.