{"id":31223,"date":"2024-06-17T11:42:00","date_gmt":"2024-06-17T09:42:00","guid":{"rendered":"https:\/\/fhi.nl\/nieuws\/cyberaanvallen-op-industriele-automatisering-vijf-strategieen-om-jouw-productie-te-beschermen\/"},"modified":"2024-12-04T13:47:32","modified_gmt":"2024-12-04T12:47:32","slug":"cyberaanvallen-op-industriele-automatisering-vijf-strategieen-om-jouw-productie-te-beschermen","status":"publish","type":"news","link":"https:\/\/fhi.nl\/en\/news\/cyberaanvallen-op-industriele-automatisering-vijf-strategieen-om-jouw-productie-te-beschermen\/","title":{"rendered":"Cyber attacks on industrial automation: Five strategies to protect your production"},"content":{"rendered":"
\n\n\t\n\t\t\t
<\/div>\n\t\n\t
\n\t\t
\n\t\t\t
\n\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t

\n\t\t\t\t\tCyber attacks on industrial automation: Five strategies to protect your production\t\t\t\t<\/h1>\n\n\t\t\t\t
\n\t\t\t\t\t<\/svg>\t\t\t\t<\/div>\n\n\t\t\t\t\n\t\t\t\t\n\t\t\t<\/div>\n\n\t\t\t\t\t\t\t
\n\n\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"\"\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t<\/div>\n\t\t\t\n\t\t<\/div>\n\t<\/div>\n<\/header>\n\n\t
\n\t
\n\t\t
\n\n\t\t\t\t\t\t\t
\n\t\t\t\t\t
Branch<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\tIndustrial automation\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\n\t\t\t\n\t\t<\/div>\n\t<\/div>\n<\/div>\n\n
\n\t
\n\t\t\t\t\t\t\t\t\t\t\t
\n\t\t\t

With increasing reports of cyberattacks targeting the industrial sector, Thomas Vasen, Business Development Manager Network Security at HMS Networks, outlines five strategies companies can implement to strengthen their defences and avoid becoming the next victim.<\/strong><\/p>\r\n

\u00a0<\/p>\r\n

Growth of cyber attacks<\/h3>\r\n

Cybersecurity is quickly becoming a major focus in industrial automation. The World Economic Forum highlighted in 2023 that manufacturing is the sector most affected by cyberattacks. Furthermore, Orange Cyberdefense<\/a> that the manufacturing sector has Common Vulnerability Scoring System (CVSS) scores that are 33% higher than the global average. The increasing number of attacks on Industrial Control Systems (ICS) is of particular concern. Gartner predicts a bleak future: by 2025, cyberattacks are expected to injure or endanger people.<\/p>\r\n

The time to take action is now. Here are five strategies that businesses can implement to effectively reduce the risk of cyberattacks.<\/p>\r\n

\u00a0<\/p>\r\n\r\n

  • \r\n

    \u00a0 OT is not just another version of IT<\/h3>\r\n<\/li>\r\n\r\n

    The first step is to adopt the right mindset. In the 1990s Netheads and Bellheads discussed<\/a> about the future of telecommunications. While Bellheads advocated for traditional methods, Netheads argued that voice should be treated like any other data and sent over IP. Three decades later, Netheads\u2019 vision has prevailed, with voice being sent over the Internet like any other type of data. Users even accepted a degradation in call quality due to increased latency and choppy calls. Fortunately, not every phone call feels like an intercontinental call anymore.<\/p>\r\n

    However, the situation with Operational Technology (OT) is fundamentally different. Unlike Information Technology (IT), OT cannot compromise on quality and increased latency, as even minor disruptions can have catastrophic consequences. Treating OT as just another version of IT is a serious mistake, as OT operates according to different principles and requirements. While IT prioritizes data integrity and confidentiality, OT requires deterministic data and uptime assurance. This distinction is especially crucial in industries such as manufacturing, where even minor disruptions can lead to significant financial losses, material waste, and operational downtime. In IT, occasional network outages or data loss may be manageable inconveniences. In OT, however, a similar disruption can have much more serious consequences. Imagine an ice cream machine breaking down due to a network outage or data inconsistency. Not only would the production process come to a halt, but the perishable ingredients would also spoil, resulting in financial losses and wasted ice cream. And nobody wants that.<\/p>\r\n

    So while it makes sense for OT to adopt IT technologies (there are many advantages to using Industrial Ethernet over traditional fieldbus networks), it must be recognised that standard IT does not meet the requirements of OT. Hence the rise of industrial communication protocols and therefore the need for specialist OT security products and solutions.<\/p>\r\n\"Figuur\r\nFigure 1: In OT, network failure would cause production processes to grind to a halt, resulting in financial losses and waste of ingredients or materials.\r\n\r\n

    \u00a0<\/p>\r\n\r\n

  • \r\n

    \u00a0 IT and OT must work together<\/h3>\r\n<\/li>\r\n\r\n

    While the Chief Information Security Officer (CISO) is under pressure and controls the security budget, often including that of OT, it is the operations manager who is responsible for uninterrupted production in the factory. This situation creates inherent conflicts due to differing priorities. IT professionals adhere to the CIA framework<\/strong>, where Confidentiality is the top priority, followed by Integrity and Availability. In contrast, operational personnel value Safety, followed by Availability, Integrity and finally Confidentiality \u2013 resulting in the (S)AIC order.<\/strong><\/p>\r\n

    \u00a0<\/p>\r\n\"\"\r\nImage HMS Networks\r\n\r\n

    This contradiction creates conflict and tension, but the underlying common goal remains clear: ensuring business continuity. In recognition of this shared goal, the CISO (IT) and the operations manager (OT) must work together to address these challenges and align their approaches to ensure business continuity.<\/p>\r\n

    \u00a0<\/p>\r\n\r\n

  • \r\n

    \u00a0 Develop a comprehensive OT security plan<\/h3>\r\n<\/li>\r\n\r\n

    Securing OT environments requires a proactive and tailored approach to the unique challenges of industrial processes. Companies must thoroughly identify and assess their assets, mapping the risks associated with each machine. Rapid detection of anomalies is important, but even more crucial is implementing robust security measures to protect these assets. Having a comprehensive recovery plan and implementing measures to minimize impact is also important and is often recommended by experts such as those at ISA\/IEC 62334.<\/p>\r\n\"\"\r\nImage HMS Networks\r\n\r\n

    \u00a0<\/p>\r\n

    Currently, many companies are focusing on asset inventory and threat detection. While this is important, it is not enough to protect OT environments. Companies must also take measures to secure their assets.<\/p>\r\n

    \u00a0<\/p>\r\n\r\n

  • \r\n

    \u00a0 Protect yourself with network segmentation<\/h3>\r\n<\/li>\r\n\r\n

    Network segmentation is an excellent way to secure OT environments. By dividing networks into zones and separating them with security access control, companies can increase security and prevent unauthorized access. The benefits of network segmentation include:<\/p>\r\n