Collaboration between Information Technology (IT) and Operation Technology (OT) requires a vast perspective to provide comprehensive security. Where OS or Antivirus updates are commonplace and have minimal obstacles in IT, they can result in critical issues that significantly hinder production KPIs if executed with the same methods in an OT environment.

Negligence in securing OT devices with legacy operational systems results in unprotected devices that are easily attacked by cyber-attacks. For this reason, convergence is needed in cybersecurity planning in a digitalized industry by first separating the IT zone from the OT.

The following are several activities to prevent cyber security in Information Technology (IT) and Operation Technology (OT) :

SEGMENTATION / ZONATION

This segmentation is called the Demilitarized Zone [DMZ] or Zone 3.5 in the Purdue model. This zone becomes a perimeter protector for the OT segment as a safety compliance tool. A capable NextGen Firewall [NGFW] is needed to filter all data packets leaving or entering the OT zone, either from IT or the internet. The selected NGFW must have a Virtual Patching feature to mitigate the need for OT devices that cannot be updated like IT devices.

VISIBILITY

The next step is to identify assets in the OT segment. This step is required to determine what digital security protocols are needed and how many assets need security. No security vendor provides this entire line of facilities. Therefore, it is necessary to implement solutions that can collaborate between principals, for example, Fortinet’s collaboration with Claroty for Asset Discovery.

SECURE REMOTE ACCESS

Remote access is now easily accessible. There are various tools available on machines in the factory to make adjustments remotely. Of course, this “direct” path also needs to be secured with an NGFW or Secure Switch.

Also read about Security Convergence between Information Technology (IT) and Operational Technology (OT) in Industry.

ROLE BASED ACCESS CONTROL

Network Access Control, Authenticator/Token can regulate the access level to OT devices for each company personnel. This solution can also set the specifications of what devices can access OT zones or devices. This assessment of the company personnel’s access level is a form of security hardening. It also can be a basis for accountability that the company entrusts to personnel who require remote access to do routine maintenance or adjust device functions.

INSIDER THREAT

What about threats from within? For example, when OT device operators unknowingly commit violations or do not realize how crucial the impact of their negligence is due to a lack of security protocol training. EDR (Endpoint Detection and Response) solutions are needed to mitigate direct human interaction aspects, such as PLC, DCS, SCADA, and HMI.

MANAGEMENT LEVEL REPORT AND SECURITY CENTRALIZATION

This comprehensive level of security certainly requires significant and sustainable investment. Therefore, there is a need for a comprehensive report that can be assessed by management. The right SIEM (Security Information and Event Management) dashboard is a solution to this problem. We also recommend SOAR (Security Orchestration, Automation, and Response) with its playbook feature to simplify security centralization and automation.

ADVANCED PERSISTENT THREAT 

Even the most sophisticated security system does not escape the risk of Zero-Day Threats which requires special attention. Two mitigations for this problem are the Sandbox solution, which will quarantine unknown signatures, and the Deceptor, which will imitate the original environment but “trick” it. If a facility is attacked, it will happen in a quarantined zone and separated from the original production environment.

In implementing various security solutions, especially in the Operational Technology aspect, good integration with the Information Technology team is needed so that operational problems do not occur. If you are looking for a comprehensive solution for Security Convergence between Information Technology (IT) and Operational Technology (OT) in the industry, you can contact us at ACS Group. You can call us at +6221 4208221, chat via WhatsApp at +62 811-1944-534, email sales.admin@acsgroup.co.id, or you can visit our website at www.acsgroup.co.id.

ACS GROUP (PT AUTOJAYA IDETECH and PT SOLUSI PERIFERAL has provided appropriate solutions for thousands of enterprises throughout Indonesia since 1992 for AIDC solutions, IT Infrastructure, Enterprise Security Systems, and Enterprise Business Solutions. Our company has four branches, namely in Cikarang, Semarang, Surabaya, and Denpasar.

In the manufacturing industry, the quality control process requires high-quality standards. Poor quality control will detrimentally affect operational and financial costs. Machine Vision with a Vision-Based Inspection System can be a quality control solution to reduce manual inspections, which can be time-consuming and prone to operational errors. By automating quality control processes, manufacturers can increase efficiency, reduce costs, and improve their reputation for producing high-quality products.

The latest research from Google Cloud shows that 76% of the manufacturing industry has shifted to digital enablers such as data and analytics, cloud, and AI. Some of the advantages of this Vision-Based Inspection System are as follows:

• Instructing the production system digitally so that it achieves the desired position. It helps in automating and streamlining the manufacturing process.
• Collecting data and improving efficiency in line production, picking, sorting packaging, and other applications.
• Information obtained by a Vision-Based Inspection System can identify problems on the production lines or other operations to improve workflow, stop inefficient processes, and identify unsatisfactory products

Comparing Quality Control with manual visuals, Automated Visual Inspection provides a broader advantages:

• Efficient: Observations and conclusions about an object can be made quickly and generate precise calculations.
• Reliable: This system can be programmed and customized according to needs, is not biased, and follows instructions without obstructions.
• Accurate: Able to measure object dimensions exactly according to standardization.
• Safety: Can be used as a substitute in conditions that could endanger humans.

Vision-Based Inspection Systems are based on industry operations, type, and size. Various industries like automotive, electronics, pharmaceuticals, F&B, packaging, and consumer goods use Machine Vision for inspection.

Also read about : The role of machine vision in industry to increase productivity

Vision-Based Inspection System Capability

Vision-Based Inspection Systems have numerous uses, which means that every manufacturer in any sector can utilize this technology to address specific problems related to product quality. Vision-Based Inspection Systems can be implemented across multiple production lines and configured to suit specific application and inspection requirements. Manufacturers can utilize the Vision-Based Inspection System for:

1. Defect Detection

• Detect and analyze extensive defects, like cracks, damage, surface finish defects, measure dimensions, and more.
• Provides the necessary data to identify and classify defects accurately.

2. Measure Dimensions

• Measure component and product dimensions.
• Analyze captured images using algorithms and calculate object dimensions.
• This method is very accurate and can be used to measure objects of various sizes.

3. Quality Standards

• Automate product inspection for quality control purposes.
• Checking conformity with established product standards.
• Inspect products for quality checks at a much higher speed than human inspectors

4. Product Counting

• Automate product counting using image processing techniques.
• Detect and count objects on the production line with precise accuracy.
• Track inventory levels and ensure products are counted correctly.

5. Detect Tool Wear

• Detect tool wear in operations machines to maintain high product quality.
• Optimize machine parts detection in the manufacturing process, ensuring that productivity is maintained and costs are kept to a minimum.

6. Package Integrity

• Inspect the packaging for defects, such as leaks, holes, missing components, and incorrect labeling.
• Ensure the package is intact and undamaged before it reaches the customer.
• Automate the inspection process and ensure only quality products are delivered.
• Increase customer satisfaction and reduce returns

Visual inspection has evolved from manual to automatic, especially for the Quality Control process. Humans are not designed to do repetitive tasks with low cognitive levels, so errors often occur in processes that rely heavily on manual inspection. Machine Vision Inspection System solutions can increase speed and accuracy in operational inspections. In addition, humans are freed from tedious and routine tasks, providing an opportunity to shift them to activities that require higher skills. Machine Vision has measurement, counting, locating, and decoding capabilities which are commonly used in manufacturing operations.

If you are looking for an easy-to-use and affordable way to complete complex tasks that range from simple object recognition image processing to advanced quality control ACS GROUP offers a Machine Vision Based Inspection System solution. For further information regarding the Machine Vision solution with the Vision Based Inspection System, you can contact +6221 4208221, Whatsapp +62 811-1944-534, Email sales.admin@acsgroup.co.id, or you can visit our website at www. acsgroup.co.id.

ACS GROUP (PT. AUTOJAYA IDETECH & PT. SOLUSI PERIFERAL), a professional company founded in 1992, has provided appropriate solutions for thousands of enterprises throughout Indonesia, both for AIDC solutions, IT Infrastructure, Enterprise Security Systems, and Enterprise Business Solutions. Our company has four branches, in Cikarang, Semarang, Surabaya, and Denpasar.

Communication is crucial, especially for industry/business that requires field team coordination. Companies usually use Handy Talky (HT) to coordinate, but with increasingly rapid technological developments, you can communicate more practically and efficiently using Handy Talky POC. One of the best POC solutions providers, Hytera, has developed and introduced PTT-over-Cellular (PoC) or cellular-based HT via GSM data or Wi-Fi as an alternative coordination solution between users.

With PTT over Cellular (PoC), complicated frequency permits are no longer required, able to send live video reports, save infrastructure investment funds, and enjoy a wide range of communication. Handy Talky POC solution will benefit various industrial sectors such as public safety, manufacturing, healthcare, and hospitality, especially in urban areas that are very cell signal friendly.

But what if a company, industry, or business already uses analog Handy Talky? “Can our functional company’s analog HT (frequencies) be combined with HT PoC and communicate directly?”

The answer is it’s impossible to communicate/connect directly because of the difference in signal types between the two, where the frequency is narrowband and cellular is broadband. A connector is needed to facilitate meetings/communication between the two, which is called a gateway.

Also read about: HYTERA PoC Handy Talkie (HT) Radio Solution for Unlimited Communication

At Hytera, there are two gateway options, namely BN100 or MPUC. However, because these two products have not yet entered Indonesia, ACS Group has a solution by using a gateway from SOLIDTRONIC with POCSTARS as the communication system/application.

POCSTARS

For communication, Hytera created the Hytalk application as an exclusive tool for communication between various users. We need an additional application for communication, namely POCSTARS. This third-party application can be used on various PoC brands. Apart from being implemented on-premises, this application is also available in subscription mode via the Cloud, which is different from Hytalk because it has two options, including:

1. 1-year subscription where users must renew the license every year. With this license, users can transfer their POCSTARS ID to any device.
2. Lifetime subscription where users only need to pay once for lifetime use of the device. This license binds the IMEI and cannot be transferred to other devices.

Apart from managing/creating communication groups and monitoring conditions via pull video and location with GPS, POCSTARS can connect communications between frequencies and cellular via gateway box devices with SOLIDTRONIC.

SOLIDTRONIC

SOLIDTRONIC functions as a translator so audio sent by analog radios can be received by radios based on cellular signals and vice versa. By using SOLIDTRONIC, information sent by analog radio can be received on the PoC.

How to connect it with SOLIDTRONIC?

Before installation, several things need to be prepared, namely:

1. SOLIDTRONIC device with the POCSTARS application (1 Year Subscription) installed. One SOLIDTRONIC device can only connect to one analog radio channel. Please adjust how many channels you need.
2. LAN cable to connect SOLIDTRONIC to the local internet network.
3. Rig-type radio based on analog frequencies to function as a repeater (example: Motorola XiR 8260). We recommend a Rig type radio for more optimal power.
4. Audio cable to connect SOLIDTRONIC to your Rig type Radio.

Note: Make sure there are pins in the audio slot/plug on the radio so that the audio cable can be adjusted.

Once all the components are ready, install them according to their respective ports. Please remember that each SOLIDTRONIC can only connect one channel/site. It needs to be adjusted according to your needs.

For more detailed information, please see How to Connect HT POC to HT Analog by ACS Group on YouTube.

A solution to connect Handy Talky (HT) Analog to the HT PTT-Over-Cellular (PoC) System will make coordination between users in your company easier. If you are interested in implementing this solution, you can contact us, ACS Group, an official partner of Hytera at +62 21 4208221, Whatsapp +62 811-1944-534 Email ke sales.admin@acsgroup.co.id.

ACS GROUP (PT. AUTOJAYA IDETECH & PT. SOLUSI PERIPHERAL), a professional company founded in 1992, has provided suitable solutions for thousands of enterprises throughout Indonesia, both for AIDC solutions, IT Infrastructure, Enterprise Security Systems and Enterprise Business Solutions. Our company has four branches, namely in Cikarang, Semarang, Surabaya and Denpasar.

Many organizations, regardless of size and industry, are increasingly dependent on IT from time to time. It provides many options for all users, from unified communications to complex application systems with container systems. Maintaining this is the responsibility of the IT division.

Smooth operations are also the responsibility of the organization’s IT division. In fulfilling this responsibility, the IT team must ensure that technology management is predictable, controllable, and continues to develop with minimal disruption or involvement of external experts.

eG Enterprise is a solution that unites monitoring and observation for all technology layers, such as applications, databases, and servers that run your services on the same dashboard in 1 control. With the help of embedded AIOps, eG Enterprise can help organizations monitor, pay attention to developments, and detect disruptions before they become problems. All information technology, like servers, applications, virtualization, storage, containers, network devices, and various other technologies, will be analyzed.

Assisted by our AIOps, all metrics collected from each technology will be compiled automatically and shown based on the priority of what must be completed first. With this, issues can be isolated more quickly, increasing efficiency.

What are the main points of eG Enterprise?

• Get correlated information across your data center and view all metrics, resource usage, configuration changes, and hardware health.
• Alert intelligence with a dynamic baseline and follow usage habits in the environment to reduce alerts and effectively pinpoint the source of problems.
• With the same system, it can provide monitoring and reports on analysis and historical data for each IT infrastructure component.
• Able to provide predictions regarding the future use of IT infrastructure components, so that they can support the IT team.

Apart from that, you can monitor the availability, issues, and performance of each type of network device that provides the SNMP protocol, including routers, switches, firewalls, and load balancers, from the brands Cisco, F5, HPE, Dell, and so on. eG Enterprise supports Monitoring availability, Packet loss, Traffic, Network Delay, Latency, Bandwidth, Discards, and Errors.

End-to-end, eG Enterprise can display metrics, resource usage, configuration changes, and hardware health with intelligent alerts. These alerts, when combined with dynamic baselines, can track usage habits in the environment and pinpoint the source of problems promptly.

eG Enterprise comprehensive infrastructure are as follows:

• Open cases drastically reduced
• Significant reduction in major incidents.
• Increased productivity with improved SLA
• Financing efficiency by reducing open cases for partners.

ACS Group is committed to delivering the best portfolio of products, ranging from endpoint devices to IT infrastructure to the latest technology, such as servers, networks, cloud, and IoT. With a wide range of services throughout Indonesia, ACS Group is ready to support, and develop our customers’ businesses, and reduce networks and security complexity on one platform with integrated solutions. Are you ready to implement it in your business processes? For further information regarding eG Enterprise solution, you can contact +6221 4208221, Whatsapp +62 811-1944-534, Email sales.admin@acsgroup.co.id, or you can visit our website at www.acsgroup.co.id.

ACS GROUP (PT. AUTOJAYA IDETECH & PT. SOLUSI PERIPHERAL) is a professional company founded in 1992 that has provided suitable solutions for thousands of enterprises throughout Indonesia, for AIDC solutions, IT Infrastructure, Enterprise Security Systems and Enterprise Business Solutions. Our company has four branches, namely in Cikarang, Semarang, Surabaya, and Denpasar.

The SASE security concept is network security that combines virtual private network (VPN) technology with SD-WAN (Software-Defined Networking) applied to Wide Area Network connections in one solution. The goal is to simplify network security management and provide safe, fast, and reliable access for operations, regardless of the user’s location. Secure Access Service Edge is widely used for organizational operations that have many users or employees who work remotely (remote workers) or use cloud applications. Adopting SASE technology will create security and speed in overcoming the issues experienced, as well as being the key to business continuity in the era of mobile and cloud adoption.

The term SASE was first coined by Gartner in a report entitled “The Future of Network Security in Cloud” in August 2019. Gartner in the report stated that SASE market trends demanded by customers matters regarding simplicity, scalability, flexibility, low latency and strong security convergence from edge networks, WAN networks to the cloud.

• Firewall-as-a-service (FWaaS)

Firewall solution with cloud-based services that can be scaled and provide new services to meet various needs. In essence, FWaaS is a location-independent perimeter firewall for secure access and provides next-generation firewall (NGFW) capabilities such as web filter, advanced threat protection (ATP), intrusion prevention system (IPS), and domain name system (DNS) security. .

• Zero Trust Network Access (ZTNA)

is a security model that requires verification of every access request on the network from all users, both inside and outside the organization. ZTNA uses technologies such as VPNs, firewalls and encryption to protect data and activity on the network. 3) Secure Web Gateways (SWG)

• Secure Web Gateway (SWG)

is a security solution for access to the internet. SWG protects users from security threats such as malware, phishing and other types of threats. SWG monitors, controls and protects the internet access of the organization by blocking dangerous or harmful websites. 4) Cloud Access Security Broker (CASB).

• Cloud Access Security Broker (CASB)

is a security solution that helps organizations manage access to cloud services and prevent data breaches. CASB protects data stored in the cloud and ensures the security and compliance of cloud applications used by internal users. 5) Software-Defined Wide Area Network (SD-WAN)

• Software-Defined Wide Area Network (SD-WAN)

is a technology that integrates and optimizes enterprise WAN network connections using software or software such as providing link redundancy and load balancing, implementing intelligent traffic routes based on performance metrics and business priorities. SD-WAN will provide better control, management and security for the network, as well as enable remote monitoring and management.

SASE includes technology packages with security into a global network structure so that it is always available no matter where users are, where applications or resources are accessed or what combination of transport technologies connect users and resources.

Implementing a Secure Access Service Edge (SASE) solution will have several benefits, including:

1. Better security: SASE solutions enable organizations and enterprises to secure all their devices, networks and applications by granting access only to authorized entities. This protects organizations and companies from cyberattacks and unauthorized attempts to infiltrate their network.

2. Operational Efficiency: SASE solutions simplify IT infrastructure by integrating many security and network functions into one. This reduces the cost and complexity of an organization’s IT infrastructure.

3. Faster network deployment: By using edge computing technology, SASE enables faster access to organizational applications and data.

4. Better Scalability: SASE enables organizations to customize and expand their IT infrastructure more easily and efficiently.

5. Improved productivity: By providing secure access to the applications and data needed by employees, SASE helps increase productivity and provide a better user experience.

ACS Group which presents a complete portfolio of products ranging from endpoint devices to IT infrastructure and the latest technologies such as mobile, cloud and IoT. With a wide range of services throughout Indonesia, ACS Group is ready to support and grow its customers’ businesses, as well as reduce complexity related to network and security in one platform with integrated solutions. Are you ready to implement it yourself in your business process? For more information about this SASE Security solution, you can contact +6221 4208221, Whatsapp +62 811-1944-534 Email to sales.admin@acsgroup.co.id or you can visit our website at www.acsgroup.co.id

ACS GROUP (PT. AUTOJAYA IDETECH & PT. SOLUSI PERIFERAL) as a professional company founded in 1992, has provided effective solutions for thousands of enterprises throughout Indonesia for AIDC solutions, IT Infrastructure, Enterprise Security Systems and Enterprise Business Solutions. Our company has 4 branches in Cikarang, Semarang, Surabaya and Denpasar.