ABB Ability™ Condition Monitoring Electrical System CMES

Password Complexity Rules and Password History The password has to contain characters from three of the following categories: • Uppercase letters of European languages (A through Z, with diacritic marks, Greek and Cyrillic characters) • Lowercase letters of European languages (a through z, sharp-s, with diacritic marks, Greek and Cyrillic characters) • Base 10 digits (0 through 9) • Non-alphanumeric characters (special characters): (~!@#$%^&*_-+=`|(){}[]:;"'<>,.?/) Currency symbols such as the Euro or British Pound are not counted as special characters for this policy setting. • Any Unicode character that is categorized as an alphabetic character but is not uppercase or lowercase. This includes Unicode characters from Asian languages A new password is only accepted by Windows when it is differs from four previous passwords.

Since the MNS Digital Edge is connected to an Ethernet network it is customer’s sole responsibility to provide and continuously ensure a secure connection between the MNS Digital Edge and customer network or any other network (as the case may be). The MNS Digital Edge has following service ports open on the integrated Ethernet interfaces: Port Service Purpose 443 https / wss WEB user-interface of ABB Ability™ Condition Monitoring for electrical systems - CMES 3389 RDP Windows remote login, e.g. used for the above described user password management Customer shall establish and maintain appropriate measures (such as but not limited to the installation of firewalls, application of authentication measures, encryption of data, installation of antivirus programs, etc.) to protect the MNS Digital Edge including CMES, the network, its system and interfaces against any kind of security breaches, unauthorized access, interference, intrusion, leakage and/or theft of data or information. ABB Ltd. and its affiliates are not liable for damages and/or losses related to such security breaches, unauthorized access, interference, intrusion, leakage and/or theft of data or information.