Use of removable media in the industrial sector today is continuing to grow and it is just as vulnerable now as it has been over the past five to ten years. A new report is out that analyzes USB-borne malware and some of the results are very interesting.

People, process and technology are three critical components to any security program. When they all are working and in sync, everything comes together in a perfect harmony – and systems stay safe and secure and up and running.

To create a secure manufacturing enterprise, you need to apply defense in depth. That means at a very basic level, if a threat actor is able to get through one level of defense, there are plenty more for them to wade through. A solid defense in depth program can truly halt an attack or really slow it down.

Most industrial firms lack a firm foundation of cybersecurity protection. Bad actors are on the rise and are constantly revising their attack tactics. Learn the best way to start a new journey along the ISA/IEC 62443 protection pathway.

Managed security services. Years ago, the mere thought of an outside organization watching over a manufacturing enterprise and ensuring the site was free and clear and not under attack would have been considered outrageous. Throw in increased connectivity and a shortage of cybersecurity talent and managed security services is a cost-effective way to secure your site.

There is no doubt the Colonial Pipeline ransomware attack was a watershed incident for the oil and gas sector.

As a result, the Transportation Security Administration released a prescriptive set of regulations for owners and operators of pipelines and LNG facilities which were very rigid. Then in July last year, after great consternation from the industry, a more flexible set of regulations released and now this July, another set of regulations released.

Just what is the impact of the TSA Pipeline Security Directive on the Oil & Gas sector.

Manufacturing’s mantra these days is everyone needs to keep the process moving – and that means security can’t get in the way. But at the same time, you want to make sure you keep the bad guys out. No easy task. Add on top of that, an expanding attack surface due to digitalization and a lack of qualified security professionals available and you have the potential for the classic low hanging fruit for attackers. That is exactly where managed security services comes in.

There is no doubt attacks are becoming more targeted and more sophisticated toward OT, which means companies need to think how they can find an attack and remain as resilient as possible so they can keep operating. This way you don’t have to hear a company say they had to “shut down operations out of an abundance of caution.”

Today, attackers learn from infiltrating systems and glean as much knowledge and capabilities as possible to where they may know the system they are attacking better than the victim. However, with the right technology and the right people behind that technology, it is possible to see an attack either happening or about to happen – and then be able to stop it.

No one will deny this is the age of digitalization across the manufacturing industry. You see it everywhere. Connectivity continues to grow and organizations are working to enjoy the benefits new age digital tools continue bring to the table. What is interesting, though, is while manufacturing enterprises adapt and digitize their processes, safety seems to be missing in action – stuck in an analog world.