Remote Device Management

OT Asset Management under NIST 1800-23 >> NIST 1800-23: Energy Sector Asset Management (ESAM) delivers a blueprint for visibility, control, and resilience across electric utilities, oil & gas, and other critical infrastructure sectors. >>> This project addresses the following characteristics of asset management: > Asset Discovery: establishment of a full baseline of physical and logical locations of assets > Asset Identification: capture of asset attributes, such as manufacturer, model, OS, IP addresses, MAC addresses, protocols, patch-level information, and firmware versions > Asset Visibility: continuous identification of newly connected or disconnected devices and IP and serial connections to other devices > Asset Disposition: the level of criticality (high, medium, or low) of a particular asset, its relation to other assets within the OT network, and its communication with other devices > Alerting Capabilities: detection of a deviation from the expected operation of assets >>> A standardized architecture allows organizations to replicate deployments across sites while tailoring to local needs, ensuring both scalability and security. > At each remote site, control systems generate raw ICS data and protocol traffic (Modbus, DNP3, EtherNet/IP), which is collected by local data servers. > These servers act as the secure bridge, encapsulating serial traffic and transmitting structured data through VPN tunnels back to the enterprise. > Once in the enterprise environment, asset management tools aggregate inputs from multiple sites, giving analysts a single source of truth. > Events and asset health indicators are displayed on centralized dashboards, enabling timely detection of anomalies, vulnerabilities, or misconfigurations. > Importantly, remote management is limited only to the data servers, ensuring that core control systems remain shielded from unnecessary exposure. >>> Here’s a 10-point summary of the ESAM reference design asset management system: > Data Collection – Gathers raw packet captures and structured data from OT networks. > Remote Configuration – Allows secure management and policy-driven data ingestion. > Data Aggregation – Centralizes collected data for further processing. > Monitoring – Continuously observes network activity for anomalies. > Discovery – Detects new devices when new IP/MAC addresses appear. > Data Analysis – Normalizes multi-site traffic into one view and establishes baselines of normal behavior. > Device Recognition – Identifies devices via MAC addresses or deep packet inspection (model/serial). > Device Classification – Assigns criticality levels automatically or manually. > Data Visualization – Displays collected and analyzed information in a centralized dashboard. > Alerting & Reporting – Notifies analysts of abnormal events and generates reports, including patch availability. #icssecurity #OTsecurity

I need ongoing support for my building control system what can a BAS provider do remotely? Preventative maintenance for Building Automation Systems (BAS) or Building Management Systems (BMS) increasingly leverages remote capabilities, allowing for efficient system monitoring, diagnostics, and updates without the need for on-site presence. Here are some key preventative maintenance tasks that can typically be performed remotely: 1. System Monitoring and Diagnostics Real-Time Monitoring: Utilizing software to continuously monitor system performance and parameters such as temperature, humidity, energy consumption, and system alerts. Trend Analysis: Analyzing data trends to identify potential issues before they become critical, such as increasing energy usage that might indicate equipment failure. 2. Software Updates and Patches Firmware Updates: Remotely updating firmware for controllers, sensors, and other components to ensure the latest security patches and features are in place. Software Upgrades: Applying software updates to improve system performance, add new functionalities, or address known issues. 3. Alarm Management Alarm Configuration and Optimization: Adjusting alarm settings to ensure critical alerts are prioritized and false alarms are minimized. Alarm Response: Quickly addressing system alerts remotely to diagnose and, in some cases, resolve issues without needing to dispatch a technician. 4. Parameter Adjustments Control Setpoints: Remotely adjusting setpoints for temperature, humidity, CO2 levels, etc., based on occupancy patterns or environmental changes. Scheduling: Updating system schedules for HVAC, lighting, and other controlled systems to match building usage, thus optimizing energy consumption. 5. Data Backup and Recovery System Backups: Performing regular backups of system configurations and data to prevent loss in case of a hardware failure or other issues. Recovery Procedures: In case of system failure, remotely restoring system configurations and parameters from backups. 6. Remote Calibration This might be more limited compared to physical calibration but can include adjustments based on known calibration curves or by comparing sensor readings across the system. 7. Energy Management Energy Usage Analysis: Remotely reviewing energy consumption data to identify inefficiencies. Implementing Energy Savings Measures: Adjusting system settings to reduce energy consumption without compromising comfort or safety. These tasks leverage the connectivity and smart capabilities of modern BAS/BMS to maintain optimal performance and reliability. The ability to perform these tasks remotely not only increases the efficiency of maintenance efforts but also significantly reduces the need for physical visits, which can be especially beneficial in large or geographically dispersed properties.

Organizations managing 500+ devices save up to 60% in IT workload. An FMCG company’s procurement manager walked into our office at QuickTech with a concern. “We want to upgrade to Apple devices, but managing hundreds of them seems like a nightmare.” They needed different setups for their sales and tech teams, pre-installed apps, security settings, and minimal IT intervention. Configuring each device manually wasn’t an option. That’s when we introduced them to Apple Business Manager (ABM) and Mobile Device Management (MDM). With Zero-Touch Deployment, their employees could receive a sealed Apple device, turn it on, and everything would be pre-configured, right from apps to security policies. "So, no manual setup? No IT headaches?" he asked. Here are three key features of Apple Business Manager (ABM), which we explained to him: 📍Zero-Touch Deployment – Devices arrive pre-configured and ready to use, with all apps and settings automatically installed. 📍Centralized Device Management – Manage and assign different profiles for sales, tech, or any team from a single platform. 📍Enhanced Security & Compliance – Enforce security policies, remotely wipe data, and ensure all devices stay updated. Today, their teams work seamlessly, and IT no longer spends hours setting up devices. If your business is confused about whether this setup would be helpful to you or not, let’s have a chat :)) #procurement #apple #procurementmanagers #quicktech #it #fmcg

Why do I share the #ErrorMessageOfTheWeek? Not to shame. But to show how bloody hard screen management really is. Most digital signage is managed by a central IT team. One team with hundreds (sometimes thousands) of screens. Screens that: 🕐 Run 24/7 📦 Receive constant content updates 🎮 Get fiddled with (people love changing the input) 📍 Are tucked away in hard-to-reach places Honestly, it’s a miracle more of them aren’t showing error messages. That’s why ScreenCloud is obsessed with Remote Device Management (RDM). Because the more teams can do remotely, the fewer errors show up publicly. > Remote reboots > Live screenshots > Status updates > Automated troubleshooting > HDMI-CEC support (yep, we can switch the channel back) Screens are vital infrastructure. But only if they work. If you’re battling blank screens, reach out to the team at ScreenCloud. We’ll show you what good RDM looks like. Already a customer? Check out our RDM feature guide to get more from your setup. #ScreensThatCommunicate #RemoteDeviceManagement #ErrorMessageOfTheWeek

Remote access to industrial control systems #ICS offers operational benefits, such as enabling faster remote diagnostics and troubleshooting by vendors, reducing downtime and improving maintenance efficiency. However, this expanded attack surface of #ICS , increasing the risk of #cyberattacks. Effectively managing this #cyber risk is important to leverage the benefits while maintaining the security of ICS. Deep diving in ISA/IEC 62443 standards we will find requirements which help in securing remote access to ICS. 1-     ISA/IEC 62443-3-2 "Cybersecurity risk assessment for system design"  ZCR 3.6 (Separate devices connected via external networks) " which requires putting Remote access device in separate zone 2-     Conduct detailed risk assessment to determine SL-T for this zone “ZCR5” in ISA/IEC 62443-3-2. 3-     ISA/IEC 62443-3-3 "System security requirements and security level " all the security requirements are essential and will depend on SL-T of remote access zone Also NIST SP 800-82 R3 “Guide to Operational Technology (OT) Security” includes requirements for securing remote access to ICS ✅A process should be developed and communicated to the organization for requesting and enabling remote access. ✅ Remote access should be provided only if justified and limited to only what is required to meet the business need. ✅Remote access should not circumvent safety or security controls (i.e., a solution should not be put in place that bypasses existing security mechanisms). ✅Implementing unique username and complex passwords. ✅Removing, disabling, or modifying any default credentials. ✅Removing access when no longer required. ✅Monitoring remote activities. ✅Ensuring operations personnel are aware of planned remote activity in the OT/ICS environment. ✅ Initiating the connection from the OT/ICS environment. ✅ Labelling remote connection devices so that operations may disconnect quickly in the case of unauthorized use. #ICS #iec62443 #otcybersecurity #icscybersecurity #icssecurity #iacsecurity #oilandgas #industrialautomation #cyber #oilandgas #ics #ot #instrumentation #instrumentationandcontrol #cyberawareness #automation #cyberriskmanagement #cisa #TahseenSaber

I've just published an in-depth guide on using Jamf Pro's Managed Software Updates to remotely update macOS devices — securely, silently, and at scale. This resource covers: 🔧 Jamf Pro setup & requirements (Bootstrap/Secure Token, Smart Groups) 🖥️ Step-by-step walkthrough of each install action 🕒 Scheduling updates using Declarative Device Management 🧪 Testing tips and fallback strategies 💡 Real-world scripting for Secure Token & Bootstrap Token fixes. #JamfPro #macOS #AppleIT #SysAdmin #Automation #ITManagement #DeviceManagement #AppleUpdates for more info refer: https://lnkd.in/dZdkfRfk