Half of the cyber security\nincidents in industrial networks are caused by employee errors.<\/p>\n\n\n\n
Despite automation, the human\nfactor can still put industrial processes at risk. Employee errors or\nunintentional actions accounted for 52% of incidents that affected operational\ntechnology and industrial control system (OT \/ ICS) networks last year. According\nto the Kaspersky’s report “The State of Industrial Cyber \u200b\u200bSecurity\n2019” [1], this problem is part of a much wider and more complicated\ncircumstance. The ever increasing complexity of industrial infrastructures\nrequires more advanced protection methods and skills. However, organizations\nare having difficulties in finding professionals who can handle with these new\nthreats, and employees have low awareness of the issue.<\/p>\n\n\n\n
Many industrial companies are planning\nto digitalize their industrial networks and implement the Industry 4.0\nstandards. Four out of five organization (81%) consider the\ndigitalization of operational networks as an important or very important task\nneeded to be completed this year. However, there are benefits of connected\ninfrastructures as well as cyber security risks.<\/p>\n\n\n\n
The good news is that OT\/ICS\ncyber security is becoming one of the most important priorities for the industrial\ncompanies, as also confirmed by the participants (87%) of a survey. However, in\norder to achieve the necessary level of security, they should invest in\ndedicated measures and hire qualified professionals who have the ability to\nimplement them efficiently. Even if companies state that they give priority to the\ncyber security, only half (57%) of them are allocating budget for the industrial\ncyber security.<\/p>\n\n\n\n
In addition to budgetary\nconstraints, there is also a lack of competent staff. Organizations are not\nonly having difficulties to find a cyber security expert with the ability to\nmanage the security of industrial networks, but also think that their OT\/ICS\nnetwork operators do not know what behavior is likely to cause cyber security breaches.\nThese challenges\ngenerate the two major concerns regarding the cyber security management. In\naddition, it also explains why half of ICS incidents, such as malware infection\nand more serious targeted attacks, are caused by employee errors.<\/p>\n\n\n\n
In about half of the companies (45%), the employees\nresponsible for IT infrastructure security, also control OT\/ICS networks in\naddition to their core responsibilities. Such an approach also brings the security\nrisks. Although operational and corporate networks are becoming increasingly\nconnected, their experts have different approaches (37%) and different targets\n(18%) in terms of cyber security.<\/p>\n\n\n\n
\u201cThis year’s research shows that companies are\nseeking to increase the security of their industrial networks. This can only be\nachieved when risks such as lack of qualified staff and employee errors are\nresolved. You can ensure that the networks are protected against threats and have\nup-to-date skills by taking a multi-layered approach which combines regular\ntraining of IT security specialists and industrial network operators with\ntechnical protection.\u201d Said Georgy\nShebuldaev, Brand Manager, Kaspersky Industrial Cyber \u200b\u200bSecurity.<\/strong> <\/strong><\/strong><\/p>\n\n\n\n In addition to making technical progress and\nawareness for the industrial cyber security, organizations need to consider\nestablishing a special protection system for Industrial IoT (IIoT), which can\nbe firmly connected externally. Almost half (41%) of companies are ready to\nconnect their OT\/ICS networks to the cloud by using preventive maintenance or\ndigital twins.<\/p>\n\n\n\n \u201cThis survey, conducted by the ARC Advisory\nGroup on behalf of Kaspersky, shows that the increasing interconnection between\nIIoT edge devices and cloud services remains a security challenge. This challenge\nwas the major reason behind the creation of best practices for the IIC\nIndustrial IoT Security Framework and the IoT Mature Security Model.\u201d Stated Dr. Jesus Molina, Director of\nBusiness Development and Chair of IIC Security Working Group,<\/strong> Waterfall Security Solutions. <\/strong><\/p>\n\n\n\n Kaspersky has a dedicated portfolio of solutions and services to address\nthe challenges facing industrial organizations. By combining protection for\nindustrial endpoints and networks, Kaspersky Industrial CyberSecurity is able\nto handle with threats at operator and network-level in ICS environments with\nadvanced threat intelligence and case response services. The solution also\nincludes a training and awareness program, specifically designed for cyber security\nexperts and OT managers\/ICS operators.<\/p>\n\n\n\n