Cybersecurity by design

Secure Product Development Methodologies

Valmet DNAe has been built by using secure product development methodologies based on IEC 62443-4-1 standards. The development process has been validated with Security Development Lifecycle Assurance (SDLA) certification, ensuring that security considerations are integrated into every stage of the system lifecycle.

Secure system architecture

Valmet DNAe has been built upon an IEC 62443-compliant reference network architecture with firewall segmentation and DMZ security zones. System structures are developed and tested to ensure that critical assets are protected from external threats. System structures follow IEC 62443-3-3 standards which define system security requirements and security levels. Formal certification for the system structures is in progress.

User Management and Access Control

Valmet DNAe system enables centralized user management through Active Directory (AD), allowing role-based access control and authentication. Integration with IT security infrastructure ensures seamless coordination between OT and IT security domains.

Real-time intrusion Detection and Prevention

Valmet DNAe enables intrusion detection and prevention mechanisms to monitor network traffic and detect potential security breaches in real time. Centralized log management enables comprehensive analysis of security events, facilitating timely response and mitigation measures.

Endpoint Protection

Valmet DNAe incorporates endpoint protection measures such as hardening, antivirus software, and whitelisting to defend against malware and other malicious threats. With endpoint security, the risks of unauthorized access and system compromization can be mitigated.

Secure connectivity on all levels

Valmet DNAe ensures secure connectivity across all levels, from field devices to enterprise systems and to cloud resources. Encryption protocols, access controls, and VPN tunneling are being implemented for encrypted communication, safeguarding data flows and preventing unauthorized access. Secure remote access solutions allows authorized personnel to operate and provide maintaince to the mill from anywhere while ensuring confidentiality and integrity of communication.