Siemens enhances cybersecurity for energy infrastructures with MDR service

Siemens Smart Infrastructure has introduced a Managed Detection and Response (MDR) service for energy suppliers and operators of critical infrastructure. The service is designed to address increasing volumes of security alerts associated with the convergence of information technology (IT) and operational technology (OT).

The MDR service provides an approach to cyber risk management in the context of staffing constraints and limited availability of 24/7 cybersecurity expertise. It is intended to support compliance with EU-wide NIS 2 legislation and provide centralised protection for digitalised systems. Siemens states that the service can reduce investment costs by up to 80% compared with operating an in-house 24/7 Security Operations Centre (SOC), and reduce operating costs by around 50% through a scalable service model.

The service includes continuous monitoring and incident analysis, with recommendations provided in response to identified threats. Siemens indicates this can reduce response times by up to 90%. Security-related data from IT and OT systems is collected and transmitted to a SOC, where alarms are assessed and incidents handled, with events prioritised from false positives to critical incidents.

Detection capabilities are updated continuously to reflect changes in the threat landscape.

Hertener Stadtwerke, a municipal utility in Germany, is an early user of the service. It is using the MDR offering to support cybersecurity requirements while maintaining energy supply operations.

The service aligns with the Charter of Trust principles, which set out guidelines for cybersecurity standards and practices. Siemens states that the offering is intended to support organisations in managing cybersecurity as part of ongoing digitalisation efforts.