Honeywell is a global technology leader in Operational Technology and IoT cybersecurity. The company offers a suite of industrial cybersecurity products designed to provide full coverage of large-scale networks, including network monitoring, asset discovery, governance, remote access, and IoT device security. Key elements of these solutions under the umbrella of Honeywell Forge Cybersecurity+ are Cyber Insights and Cyber Watch.

Honeywell Cyber Insights

Honeywell Cyber Insights is the latest innovation in Honeywell’s end-to-end cybersecurity offerings. This on-premise OT solution is designed to provide access to near real-time data on identified threats, anomalous behavior, and vulnerabilities. Its goal is to help industrial organizations operate their OT environments more securely and avoid disruptions to operations and safety.

Key features include:

  • Greater Visibility: It is designed to deliver visibility into OT and IoT networks, communication patterns, and attack vectors at individual sites.
  • Improved Asset Management and Risk Reduction: It provides fully automated asset discovery and inventory for the control network’s OT and IoT devices without disrupting the process.
  • Focused Threat Alerts: It is designed to provide dependable threat detection in complex networks to minimize false positive alarms. It achieves this by using an advanced analysis and security engine that includes a patented granular adaptive baseline.
  • Vendor-Neutrality: Cyber Insights is designed to integrate with many existing Honeywell and third-party security solutions deployed at a customer’s site.

Cyber Insights is designed to integrate with Cyber Watch to support a site’s compliance with industry standards and site-specific policies.

Honeywell Cyber Watch

Cyber Watch is also a part of Honeywell Forge Cybersecurity+ and is designed to provide enterprise-wide visibility in a centralized dashboard. This on-premise OT and IIoT solution provides access to near real-time and historical data on vulnerabilities, compliance, and threats to help organizations reduce and manage cybersecurity risks across multiple sites.

Cyber Watch is designed to leverage all the capabilities of Cyber Insights by aggregating data from multiple installations of Cyber Insights. It provides a centralized view into OT cyber threats.

Key features include:

  • Multi-site Visibility: The platform is engineered to be highly scalable, capable of providing insight into asset inventory, traffic, and alerts data from hundreds of locations, managed centrally via the multi-site dashboard.
  • Central Security Management: It provides two-way communication with in-scope sites, enabling the handling of alerts from a single central system interface.
  • Continuous Monitoring and Central Governance: It continuously monitors remote sites’ adherence to organizational policies and industry standards, such as IEC 62443, NERC CIP, NIST, and ISO 27001.
  • Optional Governance Dashboard: This feature is designed for senior leaders, such as the CISO, to know both the organizational and industry-related cybersecurity compliance status at any point in time.

Integration with SSH Communications Security’s OT Products

Honeywell and SSH Communications Security have joined forces to bring their security expertise for OT infrastructures, offering industrial-scale asset discovery, threat detection, and access in one solution.

The integrated solution combines Honeywell Forge Cybersecurity+ and SSH OT products (such as PrivX OT) to offer enhanced visibility, security, and control over OT environments.

Core elements of the joint solution:

  • Secure, Role-Based Access
  • Access Control and Monitoring
  • Data Correlation and Compliance
  • Anomaly Detection
  • Governance Consolidation

The integration allows the combination of PrivX OT session logs and Honeywell Forge Cybersecurity+ network logs, offering a unified and comprehensive view into compliance posture, which is a big step toward meeting regulatory requirements. The asset discovery and network topology mapping capabilities of Cyber Insights, as well as anomaly detection, play a fundamental role in this joint solution.