As OT Systems Become More Connected, OT Security Becomes More Challenging
OT-hosted ICS/SCADA Systems Are Being Exposed to New Threats
Arguably, the protection of the OT enterprise and integrated ICS/SCADA systems can hardly be understated. There is an absolute dependence on safe and sustained operations that span everything from Manufacturing to Energy and Utilities to Transportation infrastructure – these OT vertical sectors comprise and deliver a range of services that citizens around the globe count on daily. The advent of executive-level commitment to digital transformation strategy and proportional operational efficiency gains has materialized a significant range of cybersecurity concerns as these historically air-gapped systems are now exposed to cyber risks and a broader attack surface.
This commitment to OT system efficiency, in turn, raises the bar for OT Security standards, making it more difficult than ever for organizations to adequately protect their high-value cyber-physical assets. With this in mind, Fortinet and Forrester have come together for a third time to survey industry leaders who manage and maintain OT infrastructure. Overall, the purpose of this report is to identify and illuminate the security trends and practices that impact operations and demand security strategy and investment.
OT Security Breaches Are Anything but Rare
OT security breaches are taking place at distressing rates. Among those surveyed for this study, only 10% reported that they have never experienced this type of threat. In contrast, 58% of organizations surveyed have had a breach in the past 12 months and as a result, more than three-quarters expect regulatory pressure to increase over the next two years. In fact, if you expand the period of consideration to 24 months, the breach rate rises to 80%, illustrating that OT systems are indeed cyber adversary targets of primary interest.
It is no surprise, then, that there has been a strong drive to commit greater resources on security – 78% plan to increase their ICS/SCADA security budgets this year.
Organizations Are Moving Purposefully Toward IT-OT Convergence
OT systems traditionally thought to be “hardened” by an air-gap are often built upon legacy software, and hardware and life cycles can be measured in decades. Naturally, one significant take away from the move to converge IT and OT networks is the expansion of an attack surface that enables access to an environment where vulnerabilities exist. Indeed it is the very pursuit of operational efficiency through IT/OT convergence that resulted in broad connectivity and exposure to more traditional IT threats. This connectivity not only brings added risk but more likely opens the door for cybercriminals in a way that was not possible when these systems were isolated.
Concerns over the complexity of converged IT/OT systems were also noted in the survey. Almost all respondents (96%) foresee challenges as they move toward convergence, resulting in deliberate, careful movements that center on concerns around security. Among the respondents, more than one-third reported worrying about the following OT security challenges:
- Third parties lack security expertise needed to assist with converged technology and the Internet of Things (IoT)
- Sensitive or confidential data will be leaked
- In-house security teams lack the expertise required to secure converged technology and the IoT
- Connected smart devices will cause breaches
- Organizations have trouble staying current with the latest security tactics and protocols
- If and when a breach occurs, organizations are not able to accomplish isolation or containment
- Organizations are facing increased regulatory pressures for ICS/SCADA
Finally, compliance has become a growing concern for those managing OT systems. Seven in ten report mounting compliance pressures over the past year, and 78% feel this trend will continue for the next two years. According to the report, the regulations making the most significant impact are:
- The EU Data Protection Directive (GDPR)
- International Society (ISA) Standards
- The Federal Information Security Management Act (FISMA)
Partners Matter
One source of risk associated with IT-OT is the added exposure of infrastructure to business partners. Granting appropriate privileged access to the appropriate personnel is critically important. The Fortinet/Forrester Research study found those organizations that were most successful with securing their environments were also 129% more likely to severely limit or even deny access to their business partners.
Similarly, they were also more careful about allowing access to IT providers, granting only moderate access. Finally, these top-tier organizations were 45% more likely to keep certain security functions in-house rather than outsourcing them. However, they are also more likely to have outsourced network analysis and visibility.
So, what does this all mean? Partners – and the types of relationships that organizations form with them – are meaningful. Granting the appropriate access, making the best outsourcing decisions, and identifying situationally-ready partners will be vital to securing OT systems amid digital transformation.
Final Thoughts
As industrial systems continue to evolve, OT and cybersecurity leaders are faced with new challenges that have led to new priorities. Due to the complexity of IT/OT convergence, organizations have been deliberate in their adoption of processes to avoid data leakage or other modern threats. To appropriately protect their high-value cyber-physical assets, those who manage and maintain critical infrastructure must keep abreast of the latest security trends, especially those related to IT/OT convergence, and understand how to secure their migration into this broader, digitally transformed landscape.
See also
Vietnamese firms attend IT, industrial expo in Germany
14:58 | 18/04/2023 Information technology
Import tax exemption to benefit domestic ICT industry
10:34 | 12/04/2023 Information technology
Vietnam, the Netherlands promote exports through digital environment
15:19 | 06/04/2023 Information technology
Ransomware top menace for enterprises in SEA
15:00 | 14/03/2023 Information technology
PM urges basic, comprehensive reform in digital transformation
06:00 | 06/03/2023 Digitalization
Vietnam’s AI leadership status improving
06:00 | 04/03/2023 Information technology
See more news
Managed security provides IT talent gap solution for businesses in SEA
16:34 | 30/01/2023 Information technology
Top 10 ICT developments in 2022
06:00 | 11/01/2023 Information technology
Cybersecurity resilience emerges as top priority for Vietnamese organizations
15:39 | 05/01/2023 Information technology
ETH Vietnam: The first hub for blockchain community to build and learn together
16:23 | 17/11/2022 Information technology
Wolfoo product sets certificated as standard content
16:15 | 01/11/2022 Make in Vietnam
Base.vn received the International Award ASOCIO 2022
18:05 | 31/10/2022 Make in Vietnam
Bkav, Excelpoint provide AIoT platform built on Qualcomm ecosystem
10:01 | 21/10/2022 Make in Vietnam
C.P. Vietnam’s HR digital transformation with SAP® SuccessFactors® Solution
21:18 | 13/05/2022 Digitalization
A “Make in Vietnam” communications programming platform
13:00 | 26/12/2021 Information technology
Vietnamese patents make imprints on international maps
06:00 | 22/05/2021 Digitalization
VAT tax reduction should continue until mid-2025: Ministry
17:15 | 21/11/2024 Policy
Top legislator starts official visit to Cambodia
17:09 | 21/11/2024 News and Events
Việt Nam and Malaysia upgrade relationship to Comprehensive Strategic Partnership level
17:01 | 21/11/2024 Cooperation
Hà Nội prepares for temperature drop as cold front approaches
16:56 | 21/11/2024 Environment
First Vietnam Dialogue opens new avenues for Vietnam-Germany financial cooperation
16:18 | 21/11/2024 Cooperation
Multimedia
Vietnam - Malaysia Strategic Partnership
10:54 | 21/11/2024 Infographic
Vietnam, Dominican Republic strengthening cooperation
08:45 | 20/11/2024 Infographic
Vietnam - Brazil strategic partnership
10:26 | 19/11/2024 Infographic
Nhon - Hanoi Station elevated urban railway comes into operation
09:04 | 18/11/2024 Infographic
Key facts on G20 and Vietnam's participation
09:42 | 17/11/2024 Infographic
VAT tax reduction should continue until mid-2025: Ministry
17:15 | 21/11/2024 Policy
NA deputies scrutinise investment policy for North-South high-speed railway project
08:54 | 21/11/2024 Policy
Developing relations with China is Vietnam’s top priority: Deputy PM
08:40 | 20/11/2024 Policy
Vietnam pledges to make more contributions to APEC cooperation
09:46 | 17/11/2024 Policy
Tra fish sector aiming for production, processing greening for sustainable development
15:38 | 20/11/2024 Industry
Solutions discussed to ensure coal supply for electricity generation in 2025
16:24 | 19/11/2024 Energy
Garment industry targets 47-48 billion USD in export turnover next year
16:16 | 19/11/2024 Industry
Residents support restarting Ninh Thuận Nuclear Project, call for clear roadmap
14:46 | 18/11/2024 Energy
Workshop seeks ways to attract Japan’s green investment to Vietnam
09:43 | 20/11/2024 Investment
Government approves investment policy to build Cam Lien Industrial Park in Quang Binh
16:57 | 18/11/2024 Investment
Disbursement of public investment must be accelerated: Deputy PM
12:17 | 17/11/2024 Investment
LG plans to pour further US$1 billion investment into Vietnam
10:42 | 16/11/2024 Investment
HDBank wins three awards at Vietnam Listed Company Awards 2024
10:53 | 21/11/2024 Finance-Banking
VIB, Flywire partner to streamline cross-border payments for students from Vietnam
16:46 | 18/11/2024 Finance-Banking
Vietcombank issues 2 trillion VND worth of green bonds for first time
18:55 | 16/11/2024 Finance-Banking
UK stands ready to help Vietnam build international financial hub
17:13 | 13/11/2024 Finance-Banking
Hà Nội prepares for temperature drop as cold front approaches
16:56 | 21/11/2024 Environment
Hundreds of damaged irrigation reservoirs need repairing
09:02 | 20/11/2024 Environment
Greening e-commerce crucial for sustainable development
10:47 | 18/11/2024 Environment
National Environmental Protection Plan ensures high quality living environment
08:59 | 18/11/2024 Environment
People, community at heart of digital transformation: Deputy PM
09:26 | 21/11/2024 Science - Technology
AI is core technology of 4th Industrial Revolution: Minister
11:19 | 20/11/2024 Science - Technology
Global scientific luminaries to gather at VinFuture sci-tech week
11:08 | 19/11/2024 Science - Technology
Hà Nội to host 2024 e-commerce and digital economy forum on November 21
17:23 | 17/11/2024 Science - Technology
Việt Nam-UK Institute plans for an international university
09:14 | 21/11/2024 Society
Hanoi aims to become a smart city by 2030
09:13 | 21/11/2024 Metropolis
Huế Central Hospital boosts international cooperation to become global health hub
16:30 | 20/11/2024 Society
Hà Nội hospital partners with UK charity to provide surgeries for children with facial deformities
16:03 | 20/11/2024 Society
VN takes part in food and beverage fair in Chicago
09:45 | 20/11/2024 Vietnamese Brands
Hòa Bình honey awaits reactions from UK
10:41 | 19/11/2024 Vietnamese Brands
Post-Typhoon Yagi trade networking event starts in Hải Dương
10:04 | 19/11/2024 Vietnamese Brands
Hòa Bình exports honey and pearl onions to UK
10:17 | 16/11/2024 Vietnamese Brands
Bac Ninh Province: Dong Ho folk painting needs urgent safeguarding
15:04 | 20/11/2024 Culture
Vietnamese designers tell stories of culture at Fashion Week
10:14 | 20/11/2024 Culture
Creative City promotes socio-economic development, says expert
09:59 | 20/11/2024 Lifestyle
Five Vietnamese creations listed among the world’s 100 best-rated dishes with coconut
10:54 | 19/11/2024 Culture
Blooming buckwheat flowers on Ha Giang roads
14:54 | 21/11/2024 Tourism
Folk cultural festival on Côn Đảo Island attracts tourists
10:07 | 20/11/2024 Tourism
Tra Que named among world’s best tourism villages in 2024
11:20 | 18/11/2024 Tourism
Quảng Ninh to attract more foreign tourists by year-end
16:52 | 14/11/2024 Tourism