Siemens Energy: Empowering APAC's Cybersecurity Resilience from Cyberjaya

What made Siemens Energy choose Malaysia as Asia Pacific's new Cyber Security Operations Centre (CSOC)?
Our decision to choose Malaysia as home to Siemens Energy Cyber Security Operations Centre (CSOC) Asia Pacific stems from a combination of strategic factors. Malaysia is incredibly well-positioned to become the regional cybersecurity talent and investment hub. This is aligned with our goal of building a more mature energy value chain in the Asia Pacific region for a successful energy transition.

Firstly, Malaysia's strategic location within the Asia Pacific region makes it ideal for establishing a CSOC. It boasts excellent connectivity to other regional countries, facilitating collaboration and efficient operations. Secondly, the Malaysian government has been incredibly supportive of technology investments and has implemented policies that foster the growth of the digital economy. This stability is of utmost importance to Siemens Energy as we aim to establish a long-term presence in the region.

Considering Malaysia's strategic position in the Oil & Gas market, cost-effective infrastructure, rich pool of cybersecurity talent, and government support, it was a natural choice to establish our CSOC here. We are fully committed to strengthening cybersecurity measures and protecting critical energy infrastructure, and the CSOC in Malaysia plays a pivotal role in achieving these objectives.

Where are the other CSOC locations around the globe, and what is the position of Cyberjaya vis-a-vis the other locations?
Siemens Energy has established three global CSOCs in the United States, Germany, and Malaysia. Each CSOC has been purposefully designed from the "ground-up" to meet the needs of our energy and industrial partners in the operational technology (OT) cybersecurity domain. These CSOCs enable us to provide round-the-clock monitoring and response services and cater to their respective locations' regional and contextual requirements worldwide.

How have the Malaysian government and MDEC facilitated your journey in setting up the CSOC in Cyberjaya?
The Malaysian government's and key organisations' support and collaboration have greatly facilitated our journey in setting up the CSOC in Cyberjaya. We have established valuable partnerships with government agencies, including MDEC and educational institutions like Universiti Tenaga Nasional (UNITEN). These strategic alliances demonstrate our commitment to being a strong industry partner in developing Malaysia's cybersecurity ecosystem.

MDEC has been instrumental in guiding and assisting us throughout the process, enabling us to invest significantly in OT cybersecurity within Malaysia. Their unwavering support has been invaluable in ensuring our successful establishment and growth in this important sector.

The CSOC in Cyberjaya is the company's only purpose-built facility engineered to monitor, detect, and mitigate cyber threats on critical infrastructure such as energy and utilities. Can you elaborate more on how the facility achieves this?
Our CSOC combines our proprietary Artificial Intelligence (AI) technology platform, Eos.ii, with a team of dedicated OT cybersecurity experts. This powerful combination allows continuous monitoring, detection, and crisis support to secure energy infrastructure and industrial plants. Leveraging both human intelligence and technology, our experts undertake crucial tasks such as digital intelligence analysis and physical action to halt cyberattacks. With their deep domain expertise, they anticipate and accurately identify attackers' tactics, minimising disruptions and ensuring the availability and safety of energy systems.

What emerging technologies do you leverage to enhance your operations in Cyberjaya?
We utilise a range of cutting-edge technologies to bolster our operations and protect critical infrastructure, particularly in the energy and utilities sectors. One notable technology we leverage is the MDR (Managed Detection Response) framework, specifically designed for OT cybersecurity. Our CSOC is purpose-built with a primary focus on monitoring, detecting, and mitigating cyber threats targeting critical infrastructure.

Our innovative CSOC combines the power of AI with a dedicated team of cybersecurity experts. With AI at the core, we analyse vast volumes of real-time data to swiftly detect anomalies, identify patterns, and respond effectively to potential threats. This integration of AI technology enables us to enhance the speed and accuracy of our threat detection and response, ensuring a proactive and robust cybersecurity approach.

By harnessing AI's power and our cybersecurity team's expertise, Siemens Energy CSOC in Cyberjaya ensures round-the-clock monitoring, detection, and crisis support. We aim to fortify the security posture of businesses operating in critical infrastructure sectors, safeguarding their operational environments and enabling uninterrupted operations.

Siemens Energy has unveiled its Cyber Security Operations Centre (CSOC) in Cyberjaya, Selangor, designed to offer operational technology (OT) cybersecurity services to customers across the region and beyond

How do you bring the ESG agenda to this CSOC?

When considering the intersection of (environment, social and governance) ESG and our CSOC agenda, we recognise the crucial role that industrial cybersecurity plays in keeping the lights on. Power plants and grid operators must be acutely aware of the risks they face and the security concepts necessary to safeguard our energy infrastructure. Our CSOC takes a proactive approach to address these challenges.

To effectively integrate ESG principles, we embrace a 'security by design' approach from the start. We reduce the attack surface and mitigate vulnerabilities by considering security as an inherent aspect of system architecture. This strengthens the resilience of our energy infrastructure and aligns with environmental considerations.

From the social aspect, we foster a collaborative and inclusive work environment within our CSOC, ensuring equal opportunities, supporting employee well-being, and facilitating professional growth. 

As for governance, we prioritise transparency, accountability, and ethical standards. We ensure data privacy and protection by adhering to regulatory requirements and industry best practices. Rigorous risk assessment and management processes are in place to maintain our cybersecurity operations' long-term sustainability and resilience.

The CSOC is projected to have an investment inflow of more than €2 million (RM10 million) in the next two to three years, and up to €3-4 million (RM15-20 million) over the next five years. What is Siemens Energy’s talent attraction and retention strategy to ensure they continue to be part of this project as it grows? 
To retain and attract the crucial OT cybersecurity expertise that underpins our CSOC capabilities, Siemens Energy priorities a range of initiatives. We offer excellent professional development programmes, certifications, and foster a collaborative work environment. These opportunities enhance skill sets and provide growth prospects for our team members. We place great emphasis on recognising exceptional performance, fostering a positive work-life balance, and providing competitive compensation packages.

Furthermore, Siemens Energy promotes a supportive, inclusive culture that values diversity and continuous learning. These strategies are instrumental in attracting and retaining top talent in the OT cybersecurity field.

---

Siemens Energy's latest foray into the APAC region underscores a steadfast commitment to fortifying cybersecurity and thwarting attacks across the energy and industrial domains, with an eye to unlocking the exciting potential of Malaysia's brightest minds and raising awareness globally.