Titelmasterformat durch Klicken bearbeiten

THINK neo.
Enter a new world of process control

Unrestricted © Siemens AG 2020 siemens.com/simatic-pcs-neo

Unrestricted © Siemens AG 2020

The future of process
Titelmasterformat industries
durch Klicken bearbeiten
in the context of digitalization

IIoT

Communication Modular
technology Automation
Digital
Twin
inside

Automation

Web

Holistic Digital Twin Usability solutions

For each process object and the

Global
whole plant Collaboration

Unrestricted © Siemens
Unrestricted Siemens 2020
AG 2020
 Titelmasterformat durch Klicken bearbeiten

neo System Access neo Collaboration

Direct and secure connection to the Multi-user web engineering;
system via web - anywhere, anytime global collaboration on a new level;
and device independent highly efficient

Object- Support of
oriented Data SIMATIC PCS neo the open MTP
Management neo Usability standard
New system software, neo Scalability
Always up-to-date and Easy and intuitive GUI; all tasks in one Modularization and
consistent information workbench (Administration, Engineering, completely web-based (HTML5) From smallest applications package unit
Monitoring & Control) to world-scale plants integration made easy

Common Application Architecture

with SIMATIC PCS 7
APL, CMT, Technological Products, COMOS, PAA, Recipes…

Common Hardware and Network

Investment Protection Know-how Protection
Platform with SIMATIC PCS 7

Unrestricted © Siemens AG 2020

SIMATIC PCS neo durch Klicken bearbeiten
Titelmasterformat
Motivation for a new Software Architecture

SIMATIC PCS 7 Hardware New System Software

+ … using the same

application architecture
as SIMATIC PCS 7…

Unrestricted © Siemens AG 2020

 Various architectures
possible - from single

Titelmasterformat durch Klicken bearbeiten

station to huge distributed!

Unrestricted © Siemens AG 2020

 Titelmasterformat
Process Automationdurch Klicken
– THINK neo. bearbeiten
A new way of use cases for our customers

neo neo
System Access Scalability
Imagine your experts have Whether you supply small
immediate access to your units or managing an entire
engineering projects and production site – imagine
operation processes from a system that can be
anywhere using only a seamlessly upgraded and
secure web session. expanded during operation.

neo neo neo

Usability Collaboration Cyber Security
Interaction with the system Think to count on “Security in Depth”
will take place clearly and a system that enables because security is top
easily via a highly intuitive a secure connection of priority. Plant security,
user interface – so you can all users and external Network Security, Web
focus on what really matters suppliers at the same time. Security, System
in your business. Any With full data integrity. Integrity, Security
information within 2-clicks! Standards, Charter of Trust

Unrestricted © Siemens AG 2020

 neo System
Titelmasterformat Access
durch Klicken bearbeiten
Zero Installation Client
SYSTEM ACCESS
Monitoring & Control
RDP
Web Client Web Client Web Client
Remote
access
M+C (Monitoring Defense im depth
& Control) Charter of trust
instead of
Operator Station
due to Web Client
Optional

Server Stations
• Engineering Terminal Server
License Dongle
• Monitoring &
Control
Windows Domain Server
• Process Device Safe access for users outside
Manager the plant network
• Process Historian Administration Console
DMZ – Demilitarized Zone

SIMATIC PCS neo needs no internet connection if you need no remote access/ cooperation in operation phase!
A terminal server can be added as an additional protection layer to protect DoS attacks (via change of protocol to RDP).

The possibilites of system access allows new ways of cooperations and business models between all partners in plant engineering and operation like Solution
Partners, End Users, EPCs and Siemens. An important ability also in the future of modular plants.

Unrestricted © Siemens AG 2020

 neo Systemdurch
Titelmasterformat AccessKlicken bearbeiten
Web-based, but data ownership stays at the customer
SYSTEM ACCESS

Remote access via a

Uses web-technologies based
Terminal Server in DMZ
on HTML5 for communication
(demilitarized zone) with
between Servers and Web
according security
Clients
standards

No pre-installation on
SIMATIC PCS neo works in a devices necessary to run
local network which is usually SIMATIC PCS neo due to
not connected to the internet Zero Installation Client
approach
Web-based means:
1. Your data is save because you can host it in your local network
2. Reduced effort for stations due to no installation effort
3. Using web-technologies with HTML5 give maximum flexibility for distributed collaboration in engineering and operation as well as remote access

Online and offline set-ups in any aspect from engineering to license management up to operations and diagnostics

Unrestricted © Siemens AG 2020

 neo Systemdurch
Titelmasterformat AccessKlicken bearbeiten
Web-based, but data ownership stays at the customer
SYSTEM ACCESS

Unrestricted © Siemens AG 2020

 neo Scalability
Titelmasterformat durch Klicken bearbeiten
High flexibility to scale up the plant
SCALABILITY

• Client-Server-Technology

• Also for high-available Monitoring

& Control requirements

• Scalability in regard to:

• Lowest physical footprint
• Intuitive and interactive UI
for engineers and operators
• Device independent

• Suited for embedded systems as

well as world-scale plants

• State-of-the-art Security

Usage of SIMATIC PCS neo in applications where DCS Systems in the past were too huge and complex –
with all benefits of unique DCS functionalities.

Unrestricted © Siemens AG 2020

 neo Scalability
Titelmasterformat durch Klicken bearbeiten
Global standardization from single Process Object to Unit
SCALABILITY

• Scalable engineering templates,

from devices to equipment to
process units

• Seamless system expansion

• Time and cost savings by re-

using pre-tested engineering
templates in different projects

• Risk minimizing during

engineering, commissioning and
operation

Re-usage of pre-tested templates increases efficiency in engineering, maintenance and scale-up.

Unrestricted © Siemens AG 2020

 neo Scalability:
Titelmasterformat durchModular
KlickenAutomation*
bearbeiten
A major lever to boost engineering efficiency
SCALABILITY

From modularization of a plant … … to modular production  Better interoperability with

easy and flexible integration
of manufacturer independent
process modules.

 Plug-and-Produce on the
technological level.

 Supervisory control of large

hierarchical systems, with
the comfort of an integrated
Process Control approach.

Unit A Unit B Unit C Unit D Unit A Unit B Unit C Unit D

SIMATIC PCS neo realizes the modular plant approach and MTP in it’s complete engineering philosophy!

Unrestricted © Siemens AG 2020

 neo Scalability:
Titelmasterformat Modular
durch KlickenAutomation
bearbeiten
Integration based on open standards: Module Type Packages
SCALABILITY

Module Automation Engineering Visualization & Orchestration

TIA TIA SIMATIC

Portal Portal PCS neo
4 Operate
3 Download
2 Address set up
S7-1200 S7-1200 S7-410(E) 1 MTP import
S7-1500 S7-1500

Module Type
Package (MTP)

Unrestricted © Siemens AG 2020

 neo Scalability:
Titelmasterformat Modular
durch KlickenAutomation
bearbeiten
Integration based on open standards: Module Type Packages
SCALABILITY

Unrestricted © Siemens AG 2020

 neo Usability
Titelmasterformat durch Klicken bearbeiten
The new Workbench Concept
USABILITY

• Highly intuitive
User Interface

1 1 Header • One workbench for all

applications and tasks
2 2 Navigation
• Reduced workflows, steps and
3 3 Content
complexity
4 4 Sidebar
• Guides new users
5 5 Feedback bar
• Maximum efficient engineering

One easy to use workbench for all tasks and users!

Unrestricted © Siemens AG 2020

 neo Usabilitydurch Klicken bearbeiten
Titelmasterformat
One object-oriented system platform
USABILITY

Technological block
Archive • Consistent data
management thanks to
Faceplate
object-oriented data model
Engineering Block icon
Batch
Alarm • A change in the process
Message Monitoring object is immediately
Manage-
& Control
ment updated in all its other facets
P&ID Trends
Diagnosis
Process Asset Flexible
diagnostics Manage- number of
Mainte- ment IOs
nance
Help

Simu-
lation
Operating manual Online Help

Easy handling and change of objects – with a few clicks to any information!

Unrestricted © Siemens AG 2020

 neo Collaboration
Titelmasterformat durch Klicken bearbeiten
Flexible multi-user projects on one central data basis
COLLABORATION

• Multi users can work on the

same project at the same time
from any location

• Flexible engineering (split by

process area or engineering
task)

• Always consistent information

ensure high engineering quality

• Supports highly efficient

commissioning

• Reduced time to market due to

parallelization of workflows

New cooperation models and working structures for international teams -

Highly attractive for the best employees! Increasing engineering quality and efficiency!

Unrestricted © Siemens AG 2020

 neo Collaboration
Titelmasterformat durch Klicken bearbeiten
Flexible multi-user projects on one central data basis
COLLABORATION

Unrestricted © Siemens AG 2020

 neo Collaboration
Titelmasterformat durch Klicken bearbeiten
Flexible, late hardware binding
COLLABORATION

• Possibility of parallel Hardware

and Technological Engineering

• Change hardware at any time

• Flexible project engineering

• Complete projects faster and

more flexible

• Ensure highest project accuracy

Realizing tasks in the order that fits best to the project – independent from any system restrictions!

Unrestricted © Siemens AG 2020

Defense-in-Depth
Titelmasterformat durch Klicken bearbeiten
Security Architecture

Plant security
• Physical access protection
• Process and guidelines
• Holistic security monitoring

Network security
Security threats • Cell protection
demand action • Firewalls and VPN

System integrity
• System hardening
• Process and guidelines
• Patch Management
• Detection of attacks
• Authentication and access protection

Unrestricted © Siemens AG 2020

Defense-in-Depth
Titelmasterformat durch Klicken bearbeiten
Security Architecture

Plant security
• Physical access protection
• Process and guidelines
• Holistic security monitoring

Network security
Security threats • Cell protection
demand action • Firewalls and VPN

System integrity
• System hardening
• Process and guidelines
• Patch Management
• Detection of attacks
• Authentication and access protection

Unrestricted © Siemens AG 2020

Plant Security
Titelmasterformat durch Klicken bearbeiten
Physical access protection and monitoring

Critical data (stored on hardware that can separately be protected

by physical restrictions)
Thanks to the usage of web clients in a web-based architecture you
can protect all critical components in a separate cabinet room with
highest access protection.

Access protection refers to:

• Facilities and buildings
• Control and equipment rooms
• Cabinets
• DCS devices (Controller, IO system, Power supplies, etc.) and PCs
• Network components (Switches, Router, Wireless, WiFi) – LAN Ports
• Cables and wiring

Server Client architecture of SIMATIC PCS neo with web based access allows to protect the physical
access to critical data and systems. The physically accessible lean clients do not contain any data.

Unrestricted © Siemens AG 2020

Defense-in-Depth
Titelmasterformat durch Klicken bearbeiten
Security Architecture

Plant security
• Physical access protection
• Process and guidelines
• Holistic security monitoring

Network security
Security threats • Cell protection
demand action • Firewalls and VPN

System integrity
• System hardening
• Process and guidelines
• Patch Management
• Detection of attacks
• Authentication and access protection

Unrestricted © Siemens AG 2020

Network Security durch Klicken bearbeiten
Titelmasterformat
Network cells, Firewalls and VPN

Separation in network cells

• SIMATIC PCS neo is designed to operate in separated network cells

Multiple firewall layers

• Front firewall to control and restrict the data exchange with the office
network
• Perimeter network (DMZ) to allow service and support access to the
plant with controlled and restricted data exchange with the process
control network
• On every host Windows firewall automatically configured by SIMATIC
PCS neo

Unrestricted © Siemens AG 2020

Defense-in-Depth
Titelmasterformat durch Klicken bearbeiten
Security Architecture

Plant security
• Physical access protection
• Process and guidelines
• Holistic security monitoring

Network security
Security threats • Cell protection
demand action • Firewalls and VPN

System integrity
• System hardening
• Process and guidelines
• Patch Management
• Detection of attacks
• Authentication and access protection

Unrestricted © Siemens AG 2020

 System integrity durch Klicken bearbeiten
Titelmasterformat

Authentication &
System hardening: Patch Management: Detection of attacks:
access protection:
The system hardening of Provides an overview Early detection of attacks Provides control,
SIMATIC PCS neo helps to about missing patches in allows to take overview and easy
reduce security risk by the plant countermeasures and administration of access
eliminating potential reduces the potential to the system
vulnerabilities damage

Details Details Details Details

• Secure by default • SIMATIC PCS neo integrated central • Integrated generation of security events • Central user management with SIMATIC
• Distributed server architecture with least patch management with Administration on all SIMATIC PCS neo systems allows PCS neo User Management Component
functionality Console allows to fix security an early detection of attacks • Possible integration in Windows Active
• No additional installation on web clients vulnerabilities „quickly and without effort“ • Compatibility with antivirus software Directory user management
required, no data stored locally on web • Use of Windows Server Update • Additional protection with support of • Single Sign on for all SIMATIC PCS neo
clients Services (WSUS) for installation and optional systems like Security servers
• Hardening guideline for SIMATIC PCS neo management Information and Event Monitoring • Possibility to define the user rights on
• Additional Whitelisting software with of Microsoft updates with compatibility (SIEM), Intrusion Detection System each SIMATIC PCS neo object
configuration guide test for SIMATIC PCS neo (IDS), Intrusion Prevention System (IPS) • Two Factor Authentication (2FA)
• Web clients with Kiosk mode: No access to • Users and applications have only as
the operation system for users many rights as they actually require for
• Integrity and Authenticity protection of their tasks (Least Privilege)
SIMATIC PCS neo software with digital
signature

Unrestricted © Siemens AG 2020

 Titelmasterformat durch Klicken bearbeiten

„Security by Design – IEC 62443

conform development process,
complying Secure Coding
guidelines!“
Unrestricted © Siemens AG 2020
 SIMATIC PCS neo durch
Titelmasterformat meansKlicken
a new challenge
bearbeitenand implies a
change process in thinking - reThink

How to make
things so easy
that we can
easiliy learn and
adapt the
changes …
… and inspire
our customers!

Unrestricted © Siemens AG 2020

DI PA AE, DI PA S&V
 my SIMATIC PCS neo
Titelmasterformat – Klicken bearbeiten
durch
Complete Digital Customer Journey

First Interest Learn Specify/ Justify Purchase Implement Operate & Advocacy
Touchpoints Evaluate Maintenance

Demand Creation Specification, Configuration, Leading to Purchase, Implementation Experience

Concept & SIMATIC PCS

System ID
Design Tool myExpert*

my SIMATIC PCS neo

Website as central point of entry to
Get in touch Quick Links and Quick Access to all Platforms, Portals, Tools and Information, Concept&Design Tool, SID Share Experience
product information
Registration, Direct rooting to Industry Mall for Purchasing, SIOS, SIMATIC PCS myExpert*
* Not available with SIMATIC PCS neo V3.0
Restricted © Siemens 2020
Unrestricted © Siemens AG 2020
SIMATIC PCS myExpert
At a glance

Who is SIMATIC PCS myExpert? 1 Individual

Direct access to your DCS status – Anytime and anywhere.
SIMATIC PCS myExpert is your personal, digital companion
who monitors the system status for all SIMATIC PCS neo
installations within your fleet.
2 Valuable

It provides lifecycle relevant product information and optimum

technical support and keeps all software and hardware components
of your control system up to date:
3 System-spanning
• Stay informed about the latest available firmware and software
updates, as well as the latest security vulnerabilities
• Avoid obsolescence and enable seamless asset upgrades
• Achieve quick access to Siemens support portal 4 Lifecycle-oriented
for lifecycle relevant product information
• Manage your entire DCS inventory with a single tool

5 Standalone

Restricted © Siemens 2020

Page 57
 A new world of ...
Titelmasterformat durch Klicken bearbeiten

Unrestricted © Siemens AG 2020

 Titelmasterformat durch Klicken bearbeiten

SIMATIC PCS neo

Enter a new world of process control

Jessica Liao

DI PA AE DCS
Siemens Pte Ltd
E-mail [email protected]

Unrestricted © Siemens AG 2020