WIXLIB

Service Data SheetOctober 2016Local Patch Management Update Service Establish a successful and proactive patchmanagement strategy Tailor a site-specific patch management service Ensure the availability and business continuityof your DeltaV systemThe Emerson Local Patch Management Update Serviceis a combination of people, technology and security bestpractices designed to ensure the availability of DeltaV DCS,maintain business continuity and reduce your systemadministrative activities.IntroductionBenefitsEvery month there are new Microsoft security updates,Symantec anti-virus updates and DeltaV distributed controlsystem (DCS) system hotfixes that need to be acted upon.Emerson’s Local Patch Management Update Service providesan effective delivery solution that address the five deploymentsteps — identification of required Emerson-approved updates,acquisition of update executables, distribution to appropriateDeltaV DCS nodes, installation and compliance auditing.Establish a successful and proactive patch managementstrategy : Emerson’s Patch Management Update Servicedelivers the routine aspects of software update deploymentfor timely dependable implementation, while freeing plantstaff to devote more time to your own priorities. For largesystems, this time savings can add up to hundreds of hours peryear. The Local Patch Management Update Service identifiesthe appropriate security patches required for DeltaV DCS andschedules updates to the DeltaV DCS hardware in a routinefashion common to your plant’s policies and procedures forsecurity patching.It is very common for the most critical security, anti-virusand application hotfix updates to go uninstalled for extendedperiods of time, or not be installed at all. Often the reasons aredue to limited skilled resources and day-to-day judgment callsabout what is more important; to either address an immediateneed with a measurable business benefit or deploy the currentbatch of system software updates with their unknown and oftenun-quantified effect on system vulnerability.

Local Patch Management Update ServiceOctober 2016Tailor a site-specific patch management service: Securitypatch management and hotfixes are essential to your system’ssecurity and availability. this service can be tailored to yoursite’s work practices and resource-load to ensure these criticalupdates are deployed uritySolutionsPeriodicAuditsCybersecurity Assessments Basic Cybersecurity Assessment& Report Advanced CybersecurityAssessment & Report Cybersecurity remediationanalysis & recommendationsCybersecurity Solutions Automated/Manual Patch ManagementServices (WSUS & antivirus) Application Whitelisting Security Information & EventManagement (SIEM) DeltaV ACN Network Security Monitor Backup & Recovery Smart Firewalls, Smart Switches andController Firewalls DeltaV Upgrade Services Cybersecurity Remediation ServicesPeriodic Audits Annual or semi-annual follow-up audit Reviews adherence to previousassessment results/remediation Reviews cybersecurity real-worldchanges and suggests any remediationnecessary to protect from these changesLocal Patch Management UpdateTiered Services SuiteEmerson offers a multi-tiered approach to the application ofMicrosoft security patching, Symantec antivirus signaturescreen updates and DeltaV DCS hotfix installations. Ensure the availability and business continuity of yourDeltaV system: Emerson tests and approves MicrosoftWindows security updates and antivirus signature files on aregular basis. Experience has shown many of the disruptiveevents reported to the Emerson Global Service Center couldhave been avoided, had the relevant security update or hotfixbeen applied in a timely fashion.Full Manual Service: Utilizing Emerson certified local serviceresources, this service provides a scheduled monthly (orquarterly) visit to your site in order to manually deploy therequired security patches and antivirus signature screenupdates on each DeltaV DCS node requiring these updates.Our service will determine what Emerson-approved patchesare required for which network nodes, deploy those patches,install and commission them as appropriate. A Guardian Support service contract is not needed for this service.Assisted Manual Service: Also utilizing Emerson certifiedlocal service resources, this service level provides a scheduledmonthly (or quarterly) visit to your site in order to deploythe required security patches and antivirus signature screenwww.emerson.com/cybersecurityupdates on each DeltaV DCS node requiring these updates.We will determine what Emerson-approved patches arerequired for which network nodes, deploy those patches,install and commission them as appropriate. A GuardianSupport service contract is not needed for this service.This service can also include the installation of local server(s)for the automatic downloading of the Microsoft (WSUS)monthly patches and/or the downloading of the SymantecLive Update Administrator (LUA) and monthly upkeep ofthese server(s). If hardware is required, this can be addedat the time on initial service and will be quoted as atadditional cost.This service also includes the manual transfer anddownloading of the Emerson-approved Symantec signaturescreen onto each appropriate network node. Retrieval ofthe approved Symantec signature screen would come fromthe on-site Symantec server running the LUA platform. Thecustomer is responsible for the purchase of appropriatelicenses from Symantec; however, the Emerson servicepersonnel will deploy these Symantec signature screens.2

Local Patch Management Update Service Assisted Manual Service for Guardian Support Customers:Also utilizing Emerson certified local service resources, thisservice level provides a scheduled monthly (or quarterly) visitto your site in order to deploy the required security patchesand antivirus signature screen updates on each DeltaV DCSnode requiring these updates. We will determine whatEmerson-approved patches are required for which networknodes, deploy those patches, install and commission them asappropriate. A Guardian Support service contract is neededfor this service. This service deliverable is two-fold: a reviewof the system’s Guardian Dashboard and deployment ofnecessary OS Security, Symantec antivirus patches and/orDeltaV DCS hotfixes.This service also includes the manual transfer anddownloading of the Emerson-approved Symantec signaturescreen onto each appropriate network node. Retrieval ofthe approved Symantec signature screen would come fromthe on-site Symantec server running the LUA platform. Thecustomer is responsible for the purchase of appropriatelicenses from Symantec; however, the Emerson servicepersonnel will deploy these signature screens.This service can also include the installation of local server(s)for the automatic downloading of the Microsoft (WSUS)monthly patches and/or the downloading of the SymantecLive Update Administrator (LUA) and monthly upkeep ofthese server(s).Local Patch Management UpdateServices DescriptionFull Manual Service: This Patch Management Update Service isa scheduled site-based service, delivered by your local Emersonservice representative and includes the following services: Deployment of Appropriate Microsoft Security Updates:{{ Determination of the required “Emerson-approved”Microsoft security patches needed for each device type.{{ Scheduled deployment, installation and commissioningof each identified patch for each node.{{ Emerson will supply required Microsoft patches. Deployment of Appropriate Symantec Antivirus SignatureScreen Updates:{{ Determination of the Emerson-approved Symantecantivirus signature screen needed for each device type.www.emerson.com/cybersecurityOctober 2016{{ Scheduled deployment of the selected Symantec antivirussignature screens for each device.{{ File must be locatable on the customer Symantec server.Assisted Manual Service: This Local Patch ManagementUpdate Service is a scheduled site-based service, delivered byyour local Emerson service representative and includes thefollowing services: Includes services necessary to set-up communicationsbetween the Microsoft WSUS website and the Symantecantivirus website.{{ Separate quotation for required server is also available Deployment of Appropriate Microsoft Security Updates:{{ Determination of the required “Emerson-approved”Microsoft security patches needed for each device type.{{ Scheduled deployment, installation and commissioning ofeach identified patch for each node.{{ Emerson will supply required Microsoft patches. Deployment of Appropriate Symantec Antivirus SignatureScreen Updates:{{ Determination of the Emerson-approved Symantecantivirus signature screen needed for each device type.{{ Scheduled deployment of the selected Symantec antivirussignature screens for each device.{{ File must be locatable on the customer Symantec server.Assisted Manual Service for Guardian Support Customers:This Local Patch Management Update Service is a scheduledsite-based service, delivered by your local Emerson servicerepresentative. Generally, the service is two-fold: a review ofthe system’s Guardian Dashboard status and deployment ofnecessary OS Security, Symantec antivirus patches and/orDeltaV DCS hotfixes installation. The Guardian Support Dashboard Review focuses on severalkey tiles:{{ System Profile - Provides system contentinformation relative to your DeltaV DCS includinglast update information.{{ Knowledge Based Articles (KBA’s) – Provides importantinsight into the update status and requirements of KBAsassociated with your DeltaV DCS.3