Industrial Cybersecurity Solutions

Network Security & IT/OT Convergence

Who Owns Industrial Cyber Protection?

"…reliance on control systems continues to expand across not only industrial settings, but also the operation & maintenance of our cities, our buildings and all kinds of modern smart applications. The convergence of IT and operational technology (OT) has now come into popular awareness as the lines between the Internet of Things (IoT) and the Industrial Internet of Things (IIoT) have blurred and the media have given increased coverage to security breaches and their impacts."

2017 SANS Survey: Securing Industrial Control Systems, Executive Summary

 

---

IT vs. OT—What’s the Difference?

Traditionally, industrial enterprises have kept everything separate with information technology professionals managing the office network—an mild environment where internet speed & data security were paramount. On the plant floor, operational technology professionals addressed harsh environmental conditions with a closed air-gapped network & & focus on keeping
production running safely. 

For more, read Why IT-OT Convergence Means Greater Resources for Both.

 

IT Priorities	OT Priorities
Confidentiality	Safety
Integrity	Availability
Availabilities	Integrity
	Confidentiality

Katherine Brocklehurst, “Cyberattacks and Bottom Lines: Who Has Responsibility for Industrial Cyber Risks?” Advancing Automation eBook, Vol. III:20-25.

 

---

Secure. Reliable. Resilient.

Ensuring a secure and reliable industrial infrastructure in light of new cybersecurity threats.

---

Today's Picture—A Single Converged Network

Now, more devices on the plant floor need to be connected to the Internet. Remote locations must be managed from one central location. Executives in the office demand data to manage plant maintenance, upgrades, output quantity and quality and inventory levels.

That means blurry – or nonexistent – lines between IT and OT roles and responsibilities. The network of the future will be unified to serve both worlds.

Automation & Data Exchange in Real-World Applications

Merging automation networks of the factory (OT) with the data exchange office network (IT) requires intentional actions. Here are a few steps to get you started.

• Know your assets–including the protocols & languages that run devices
• Open lines of communication so everyone shares common vocabulary of terms—see the blog How Plant Operators Can Overcome the Language Barrier
• Leverage expertise from both IT and OT to re-align priorities—see the blog IT/OT Convergence Means Greater Resources for Both
• Set formal policies for network management, clearly defining converged roles & responsibilities
• Promote ongoing education to learn & adapt best practices 

 

 

Trends & Data

While a majority of organizations have cybersecurity fears, few have been willing to invest in preventive measures. According to a survey by Gartner³, some of the most common reasons for delaying include:

 

 

The Cost of Catastrophe

Current data suggests three of four cyber events are due to unintentional human error or accident^*

Whether malicious or mistaken, cyber events put worker safety at risk, shut down production, disrupt public utility services & erase profits.

 

The Lesson?

Start now—with your most critical assets. Start with auditing where you are today & aligning IT & OT protocols.

 

Enterprises that wait for the "significant" cyber event before they act will find a sobering price tag

Unintentional Threat	$2M	Excessive network traffic recently caused a major UCA nuclear plant $2M after cooling drive controllers crashed.
Accidental Exposure to Malicious Threat	$14M	Exposure to an internet worm shut down 13 auto plants for less than 1 hour, but cost the company $14M.
Malicious Intentional Attack	$1T	The Stuxnet virus set Iran's nuclear program back 2 years. A similar attack on the US could cost the government $1T.

 

 

---

 

---