Cybersecurity is quickly becoming one of the most important and potentially impactful risks to a process or refining facility. Cybersecurity solutions for electrical infrastructure can be challenging to implement because of the large number of devices that utilize a single set of passwords. The potential solutions to mitigate these risks can be expensive, inefficient, and time consuming to maintain. This article describes a case study of developing and implementing cybersecurity best practices for electrical infrastructure at a refining facility using a low-cost and low-maintenance approach. The design approach for this case study employs a centralized solution to implement role-based user access control, automated device password management, and a centralized data aggregation and human-machine interface (HMI) platform. The development of the cybersecurity best practices, design and implementation of the automation and cybersecurity platform, operations and maintenance, and lessons learned are discussed.

中文翻译：

---

为炼油厂的电气基础设施实施网络安全最佳实践：案例研究

网络安全正迅速成为流程或精炼设施最重要和潜在影响最大的风险之一。由于大量设备使用一组密码，因此电气基础设施的网络安全解决方案实施起来可能具有挑战性。缓解这些风险的潜在解决方案可能成本高昂、效率低下且维护起来很耗时。本文介绍了使用低成本和低维护方法为炼油厂的电气基础设施开发和实施网络安全最佳实践的案例研究。本案例研究的设计方法采用集中式解决方案来实现基于角色的用户访问控制、自动化设备密码管理以及集中式数据聚合和人机界面 (HMI) 平台。