Technical Basic Policy for Microsoft Software Updates

Information (Including Security Patches) with Yokogawa

ICSS Products
TI 33Y01B30-02E

n INTRODUCTION
This document describes the basic policy for applying Microsoft software updates (including security patches) when
using Yokogawa Integrated Control & Safety System (ICSS) products.

n Premise
• To reduce the risk of cyber-attacks on control systems used by customers (hereinafter the customer’s environment),
Yokogawa recommends applying Microsoft software updates at the earliest possible opportunity in the same manner
as for the general IT environment.
• Customer should apply Microsoft software updates in the customer’s environment in accordance with their
companies’ security policies. Because each customer’s environment is different, the impact of Microsoft software
updates is also assumed to be different. Therefore, Yokogawa recommends checking the operation and impact of
Microsoft software updates in the customer’s environment.

n Basic Policy
• To support its customers, Yokogawa investigates Microsoft software updates. Microsoft software updates relevant
to Yokogawa ICSS products are integrated into a standard test environment of Yokogawa ICSS products, and the
verification results are provided to customers for a fee. These verification results help customers decide which
Microsoft software updates can be applied to Yokogawa ICSS products.

n Monthly Verification of Microsoft Software Updates with Yokogawa ICSS

Products
The following describes monthly verification of Microsoft software updates in a standard test environment of Yokogawa
ICSS products as stated in the basic policy.
 Purposes of verification
• Discover which Microsoft software updates have an impact on the operation of Yokogawa ICSS products and
discover any problems.
Ensure that Yokogawa products can operate safely and stably by quickly fixing problems discovered through
verification.
 Precaution regarding verification
• The verification conducted by Yokogawa is intended to reduce risks of impact and problems due to Microsoft
software updates. However, this verification is not a guarantee that all problems have been found or that no problem
will occur within the customer’s environment.

 Microsoft Software Updates subject to verification

• Windows 10 and later Windows operating systems, Microsoft products that can coexist with Yokogawa ICSS
products:
Updates distributed by the second Tuesday of each month are verified.

• Windows 7 SP1, 8, 8.1, Windows Server 2008 R2 SP1, 2012, 2012 R2:
The “Security Monthly Quality Rollup” distributed on the second Tuesday of each month is verified.

Note: The “Security Monthly Quality Rollup” is one of three servicing type updates that were changed in October 2016.

 Verification results service

• The verification results include a list of the Microsoft software updates that can be applied with Yokogawa ICSS
products and a list of the discovered problems. These verification results are provided via the following paid services
on the second Tuesday of the month following the verification.

Yokogawa Electric Corporation TI 33Y01B30-02E

2-9-32, Nakacho, Musashino-shi, Tokyo, 180-8750 Japan ©Copyright Sep. 2006 (YK)
Tel.: 81-422-52-5634 Fax.: 81-422-52-9802 4th Edition June 2017 (YK)
 2
n Related Services
Yokogawa supports customers in applying Microsoft software updates by providing the verification result, as well as
an outsourcing service to apply updates.
• Providing service of integrated monthly verification results:
“Security Information Service” in Endpoint Security Service (GS 43D02T30-02EN)
• Outsourcing service to apply Microsoft software updates:
“AV/OS Update Service” in Endpoint Security Service (GS 43D02T30-02EN)
.

All Rights Reserved. Copyright © 2006, Yokogawa Electric Corporation TI 33Y01B30-02E June 3, 2017-00
 3

Revision Information
Title: Basic Policy for Microsoft Software Updates (Including Security Patches) with
Yokogawa ICSS Products
Manual No.: TI 33Y01B30-02E

Sep. 2006/1st Edition

Newly published

Apr. 2008/ 2nd Edition

Change in recommendation of security patch
Change the test procedure

June 2013/ 3rd Edition

Added descriptions about applying security patches

June 2017, 4th Edition

Comprehensive revision associated with changes in the servicing model for Microsoft software updates

Written by Yokogawa Electric Corporation

Published by Yokogawa Electric Corporation

2-9-32 Nakacho, Musashino-shi, Tokyo 180-8750, JAPAN

All Rights Reserved. Copyright © 2006, Yokogawa Electric Corporation TI 33Y01B30-02E June 3, 2017-00
Subject to change without notice.