Facebook Twitter LinkedIn RSS
    Trending
    • Nigeria targets 95% digital literacy by 2030
    • The $200 billion quest for reliable electricity, By Elvis Eromosele
    • A2P messaging license to cost N10 million, NCC announces
    • Nigeria Innovation Summit unveil agenda for 10th Conference
    • Vesti to host over 1,500 entrepreneurs, investors, and diaspora leaders at Prosper Conference 2025
    • PalmPay takes on Nigeria’s 90% insurance gap
    • SiBAN celebrates Interstellar’s groundbreaking contribution to Africa’s Blockchain ecosystem
    • Sophos expands solution to guide organizations to mitigate internal vulnerabilities
    Facebook Twitter LinkedIn
    ITPulse.com.ngITPulse.com.ng
    • News
    • Interviews
    • Blogs
    • Analysis
    • Opinion
    • Videos
    • Press Releases
    • Pictures
    • Advertise
    ITPulse.com.ngITPulse.com.ng
    Home»News»Three factors that put ICS Security in key verticals at risk
    News 4 Mins Read

    Three factors that put ICS Security in key verticals at risk

    mmBy ITPulseAugust 17, 2018
    Facebook Twitter WhatsApp Pinterest LinkedIn Reddit Tumblr Email
    Share
    Facebook Twitter LinkedIn Pinterest Email

     

    With almost 40 percent of ICS computers facing attacks every 6 months, Kaspersky Lab has in its latest edition State of Industrial Cybersecurity 2018’ survey, disclosed that Understaffing, Underinvestment and Human Errors are the factors that put ICS Security in key verticals at risk.

    Analyzing the report, Kaspersky said industrial and energy enterprises, as well as transport and logistics companies, have different opinions regarding the negative effects of cyberattacks on their industrial networks. But, when it comes to the issues affecting their ability to keep networks secure there are three key concerns they can agree on; understaffing, underinvestment by senior management and the human factor.

    Different fears

    Depending on the industry, organizations have different assessments concerning the damage caused to their business by cyber threats. For transport and logistics companies that build their business based on a service model, the most negative impact is losing customer confidence (75%). But for the majority of manufacturing enterprises (66%) and energy companies (73%), their biggest concern is compromising the quality of production due to a cyberattack.

    … same tears

    Our research found that despite the frequency and debilitating impact of ICS network attacks, only 52% of companies have dedicated response measures in place to deal with such an incident. This is compared to the protection afforded to corporate networks, which is at a more mature level: the majority (77 % ) implementing response measures in the case of incidents affecting corporate IT.

    There are several common reasons why this might be the case, which unite industrial organizations as they struggle to keep ICS networks secure.

    Under-resourced and under-skilled

    The task of protecting industrial networks often falls to those providing corporate information security. In 40% of manufacturing organisations, ICS protection is the responsibility of corporate IT security officers. Within transport and logistics companies, over half of those surveyed (58%) confirm that ICS safety is provided by a dedicated team working full-time to combat threats.

    Industrial organisations, especially those with complex technological processes, need highly specialised, qualified employees to fill the gap. For example, in the energy sector, where national critical infrastructure is managed with the help of ICS, the main challenge when it comes to security management (61%) is hiring employees with the relevant skills.

    Lack of top management involvement causes underfunding

    In many enterprises, IT security is a priority for senior management, but in more than half (54%) of manufacturing companies, top management is little – if at all – involved in ICS protection issues, which results in underinvestment. Indeed, two-thirds (66%) do not have a dedicated budget for providing security of critical infrastructure. And this position remains unchanged, even in the event or risk of an incident, with 17% of manufacturing organisations not considering this a sufficient enough reason to invest in ICS security.

    The human factor is an evergreen problem in ICS security

    The consequences of employee errors pose a critical threat to half of all organisations in all sectors (49%). This is not surprising, given that after malware and ransomware, it is the most common reason for security incidents in ICS (27%). Fortunately, companies are aware of this problem and are trying to solve it by training personnel and creating rules of behavior on critical infrastructure objects. 82% of organisations have already implemented training for employees, contractors and vendors.

    Whatever the most feared consequences for industrial organisations, the only way to prevent or lessen the effect of an attack is to put in place robust safety measures and procedures for ICS networks. Monitoring and timely responses to incidents on industrial networks should become key IT security priorities, along with educating and arming staff on how to minimise the risks to their business.

    “Cyberthreats are constantly evolving and targeted attacks, such as the recent Triton and Industroyer, exploit employee weakness. Incidents caused by accidental actions of employees can lead to data leaks and the failure or complete shutdown of production processes. For enterprises, this could lead to huge financial and reputational losses,” said Georgy Shebuldaev, Head of Kaspersky Industrial Cybersecurity Business Development. “To stop this from happening, a combination of technical and administrative measures are required, which includes both the training of personnel and implementation of specialised cyberdefense systems for all levels of industrial infrastructure.”

    Cyber security GlobalData kaspersky Technology
    Share. Facebook Twitter Pinterest LinkedIn Tumblr Telegram Email
    mm
    ITPulse
    • Website
    • Facebook
    • Twitter
    • LinkedIn

    ITPulse is a wholly information technology communication (ICT) news website, with a special focus on the African continent. The website provides up-to-date biz-tech news, analysis and comprehensive and thorough insight into the continent's ICT terrain

    Related Posts

    Nigeria targets 95% digital literacy by 2030

    July 9, 2025

    Vesti to host over 1,500 entrepreneurs, investors, and diaspora leaders at Prosper Conference 2025

    July 9, 2025

    PalmPay takes on Nigeria’s 90% insurance gap

    July 9, 2025

    Leave A Reply Cancel Reply

    Subscribe to Updates

    Get the latest creative news from FooBar about art, design and business.

    Latest Posts

    Nigeria targets 95% digital literacy by 2030

    July 9, 2025

    The $200 billion quest for reliable electricity, By Elvis Eromosele

    July 9, 2025

    A2P messaging license to cost N10 million, NCC announces

    July 9, 2025
    About
    About

    Itpulse.com.ng is a wholly information technology communication (ICT) news website, with special focus on the African continent. The website provides up-to-date biz-tech news, analysis and a comprehensive and thorough insight info the continent's ICT terrain.

    Contact us: editorial@itpulse.com.ng

    Facebook Twitter LinkedIn RSS
    Latest Posts

    Nigeria targets 95% digital literacy by 2030

    July 9, 2025

    The $200 billion quest for reliable electricity, By Elvis Eromosele

    July 9, 2025

    A2P messaging license to cost N10 million, NCC announces

    July 9, 2025
    Popular Posts

    Nigeria’s Digital Awareness Programme Wins Top Global ICT Award

    July 8, 2025

    Nigeria Data Protection Commission fines MultiChoice Nigeria N766.2 million for privacy violations

    July 7, 2025

    Nigeria targets 95% digital literacy by 2030

    July 9, 2025
    © 2017 - 2025 Itpulse. Designed by Max Excellence.
    • Terms & Conditions
    • Privacy Policy
    • Advertise
    • Contact Us

    Type above and press Enter to search. Press Esc to cancel.