asane

Stop being a permanent target for cyber threats!

Online Niel October 30, 2024

Over the past three years, the growth of IoT, cloud computingand automation has made manufacturing the most cyber-attacked industry. So what can manufacturers do to become more secure against cyber attacks and avoid further financial loss and damage to their reputation? Cyber resilience requires manufacturers to focus on protecting interconnected OT and IT through data access control, network segmentation and constant monitoring.

With the most cyberattacked industry and a hack occurring every 39 seconds, it’s no surprise that high-profile cyberattacks are a common occurrence in the manufacturing industry. In 2022 and 2023, major car maker Toyota was at the center of cyber attacks, an attack that left 14 factories shut down for 24 hours due to a virus infecting a file server. During the time the factories were closed, they lost 13,000 vehicles manufactured – highlighting the importance cyber security to all companies, regardless of their size.

Reidar Boldevin

Consulting Manager – Security at Columbus UK.

A company effort is required for cybersecurity

A common misconception among many organizations is that security is just an IT issue, but it has an impact customer and employee in plants around the world. Research in the UK found that production stoppages were the most common result of a cyber attack (65%), with reputational damage second (43%). In addition, new customers now want to be assured of the details of existing cyber security before signing contracts. So how can manufacturers become more cyber resilient?

Manufacturing enterprises can no longer delegate cybersecurity exclusively to Security Operations Center (SOC) teams. Rather, responsibility for security should rest with top management across the organization, with measures in place at every operational level.

1. It all starts with identifying the most vulnerable areas in the area to cyber attacks

The first step to improving your cybersecurity measures begins with an assessment of your current level of digital readiness and an identification of areas for improvement. But knowing how to spread cybersecurity investments can be challenging. As a top priority, manufacturers must secure the boundary between IT and OT, and this involves protecting critical assets and preventing unauthorized access between systems.

Manufacturers can prioritize cybersecurity efforts by quantifying risks and assessing the impact on operations in the event of disruptions. Without this step, manufacturing companies will accumulate multiple security systems that do not meet their needs and can lead to inefficiencies and potential security risks.

Reduce response times by planning ahead

The crucial planning steps follow. It is important to have a business continuity plan to ensure continuity during critical IT incidents. This will allow critical functions to continue for a limited period of time and help manufacturers manage supply chain disruption more effectively. A structured disaster recovery the plan, understood by every employee, should be followed to establish plans for rapid responses to cyber security incidents and disruptive events, minimizing operational downtime.

Once manufacturers understand where the cyber weaknesses are, it’s time to put defenses into action.

2. Data protection is key to keeping your business operations and strategies secure

Manufacturing companies have invaluable data that optimizes operations and drives innovation, but without adequate management and security, this data poses a significant security risk. In 2023, the global average cost of a data breach totaled $4.45 million, an increase of 15% in 3 years.

Each piece of information, whether about suppliers, partners, material quality, stakeholders or finances, can represent a comprehensive picture of a company’s operations, strategies and vulnerabilities. Financial data, along with stakeholder information, for example, could expose vulnerabilities in financial systems or potential leverage points for competitors. This is where effective data governance policies and procedures, such as clear guidelines on data sharing and access, along with strong encryptioncan prevent data from falling into the wrong hands.

Data audits can assess the sensitivity and criticality of each data set and evaluate existing security measures and controls. Machine learning and AI technologies can help here by identifying pattern anomalies and potential data threats, enabling proactive risk management and threat detection.

3. Move forward now, don’t wait for the next legislation to come into force

Cybersecurity is not just a way to protect manufacturing operations, as it protects a company’s brand perception. Manufacturers can build customer confidence by staying current with the latest cybersecurity certifications and regulations, as it signals to the market that the company prioritizes security.

The Network and Information Security Directive (NIS2) is the next piece of legislation that will impact manufacturing organizations operating in the EU. The directive aims to build on previous regulations by implementing stronger cybersecurity and resilience standards, as well as stricter reporting measures in the event of a security incident – but are manufacturers ready to comply?

Failure to prepare will leave supply chains vulnerable

Shockingly, only three-quarters of organizations in the UK, France and Germany have yet to complete preparations ahead of the NIS2 implementation date of October 2024. When NIS2 failure can result in fines of up to €10 million ($10.5 million) , or 2% of an organization’s global annual revenue, it is important for manufacturers to assess how well existing cyber measures will comply with future legislation.

As NIS2 aims to address the security of supply chains, companies will need to manage cyber security risks associated with suppliers and ensure that adequate security measures are in place throughout the supply chain. This represents an opportunity for companies to strengthen supply chains and build resilient relationships with trusted suppliers.

4. Access management prevents the spread of infection

Connectivity between OT and IT environments allows employees to work across interfaces, but also creates new risks for workstations. An infected workstation can become a stepping stone to the production environment by lateral movement. This is why manufacturers need to control access to operational technology and monitor network interfaces.

Access management can help manufacturers introduce new authorization measures, such as multi-factor authentication, that ensure employees access only what they need, when they need it, and from approved locations.

The rise of hybrid workers requires improved security measures

With more people working remotely and on their personal devices, it’s also important to consider the security implications of non-compliant devices. This is where stronger access controls and authentication methods can keep sensitive data and systems safe from potential threats.

5. Adopt a security-first culture

According to the IBM X-Force Threat Intelligence Index report, scripts embedded in OneNote files, malicious links in PDFs, and executables disguised as document files are the most popular methods used by threat actors. All signs indicate that cyber threats are more likely to come through a company’s first line of defense – their employees. So how can manufacturers create a human firewall?

Cyber security measures are only effective if employees understand best practices. This is where comprehensive training programs can help employees have the knowledge and skills to adapt and excel with safer workflows.

It doesn’t make life harder for employees

As with training programs, employees will only perform appropriate cybersecurity practices if they can easily do so. Robust access management processes supported by effective tools can reduce delays and employee frustration while helping manufacturers maintain security standards. Single sign-on, for example, which consolidates access to different systems under a single account, improves security and adheres to zero-trust practices without sacrificing user convenience.

A new secure era for manufacturing is on the horizon

Manufacturers cannot be swayed by new production pressures, as additional investments in cyber security will be critical to unlocking production growth.

A weak link could allow a cyber attack to enter the factory and attack their systems with catastrophic effect. Manufacturers must act now to increase their cyber security measures and prevent the next attack before it is too late.

We’ve reviewed the best enterprise resource planning (ERP) software..

This article was produced as part of TechRadarPro’s Expert Insights channel, where we showcase the best and brightest minds in the tech industry today. The views expressed here are those of the author and are not necessarily those of TechRadarPro or Future plc. If you’re interested in contributing, learn more here: