DeltaV compatibility test of the latest available virus signature files

Hello all.

Quote from the DeltaV Security Manual, Section 4.3.8:

"We have not found it necessary to test each antivirus software signature file update with the DeltaV system; however Emerson does perform a monthly DeltaV compatibility test of the latest available virus signature files in conjunction with the compatibility testing of Microsoft security updates. Customers subscribed to Guardian Support may elect to receive a monthly notification indicating the date/version of the most recently checked Symantec virus signature file"

I am looking for experiences, and opinions regarding this service from Emerson. We would like to be independent of release dates and also update the files more often.

Let me know if you use this service, and what are your views on the risks if you do not.

Thank you.

René Larsen

Novo Nordisk A/S, DK

• cybersecurity
• best practice

Rene Larsen

• 12 Jun 2018 3:39 PM
• Cancel

1 Reply

• DCSNewbie

  

  • 12 Jun 2018 4:37 PM

  We have always taken the view to update the Antivirus definition when released (usually weekly). We virtualize all our systems as a test system and then test the release, restart the virtual machines to certify that the definition has not caused any upset to the Operating System. It is important to note that we cannot tell if the definition interrupts controls communication, but we are normally confident as long as the Operating System works accordingly. We also check logs to ensure no critical processes are being blocked / files have been marked as threat detected. We then move to our production systems after the test.
  
  We use the same process for the Emerson approved Microsoft security releases - We again test on our virtual systems, restart the virtual machines and prove that the Operating System is working normally and that there are no errors noticed. Then we move to the production machines.
  
  Hope this helps.

  • Cancel