The digitalisation of industrial infrastructure is underway and 55% of organisations are confident that the Internet of Things (IoT, as one of its key aspects, will change the state of security in industrial control systems (ICS), according to Kaspersky’s recent report.
Entitled “The State of Industrial Cybersecurity in the Era of Digitalization”, the report however found only 20% of organisations have already prioritised IoT-related incidents but solutions effective against IoT threats are yet to become widespread.
“While industrial enterprises will only increase the implementation of connected devices and smart systems, they should strive for the same efficiency level when it comes to protection,” said Grigory Sizov, head of KasperskyOS business unit, Kaspersky. “To achieve this, protection should be built-in when a project is initiated, and for some companies, it should be done today. IIoT components must be secure at their core to eliminate the possibility of an attack on them. “
“Along with traffic protection and other technologies, this makes the entire system secure by design and this means it becomes immune to cyber-risks,” he added.
Indeed, industrial organisations continue to implement digitalisation and Industry 4.0 standards despite the market slowdown as a result of the coronavirus pandemic.
For instance, McKinsey & Company’s recent research revealed that 90% of manufacturing and supply chain professionals plan to invest in talent for digitisation. It also showed that companies, where such projects had already been introduced, feel more confident during crises.
Kaspersky pointed out that the growing number of digitalisation projects, such as industrial IoT, raises awareness of the associated risks. For one-in-five companies (20%), attacks on IIoT have already become one of their main cybersecurity concerns, bypassing such serious threats as data breaches (15%) or attacks on the supply chain (15%). The cybersecurity vendor said addressing these threats increasingly requires security professionals’ involvement, not just IT teams. In 2020, in almost half of the enterprises surveyed, IT security personnel are working on initiatives to protect digitalized OT systems (44%).
The report showed that today, however, not all organisations may feel ready to face threats to IoT. Thus, only 19% of companies have implemented active network and traffic monitoring, and 14% have introduced network anomaly detection – these solutions allow security teams to track anomalies or malicious activity in IoT systems.
To ensure IIoT systems are used effectively and safely, Kaspersky experts provide organisations with the following advice:
- Consider protection at the very beginning of IIoT implementation by using dedicated security solutions. For example, Kaspersky IoT Infrastructure Security solution is designed to safeguard industrial and business networks for IoT devices – including smart meters, controllers and others. Its key element is Kaspersky IoT Secure Gateway, based on KasperskyOS.
- Assess the status of a device’s security before its implementation. Preferences should be given to devices that have cybersecurity certificates and products from those manufacturers that pay more attention to information security.
- Conduct regular security audits and provide the security team responsible for protecting IoT systems with up-to-date threat intelligence.
- Establish procedures for obtaining information on relevant vulnerabilities in software and applications, and available updates to ensure proper and timely responses to any incidents. ICS Threat Intelligence Reporting service provides insights into current threats and attack vectors, as well as the most vulnerable elements in OT and industrial control systems and how to mitigate them.
- Implement cybersecurity solutions designed to analyse network traffic and detect anomalies and prevent IoT network attacks, then integrate the analysis into the enterprise network security system. Kaspersky Machine Learning for Anomaly Detection analyses telemetry and identifies any suspicious actions in the network before it causes any damage.
