Benefitting from smart manufacturing requires a security strategy to help secure your infrastructure, protect assets and maintain network availability.
By Umair T. Masud, consulting services product manager, Rockwell Automation
Global cyberattacks, such as WannaCry and Petya, affected thousands of targets and networks around the world. Even if you escaped these, attacks that target an industry, company or country can cause as much damage, whether the goal is to disrupt operations, gain attention or ransom data.
Decrease Your Attack Surface
Food and beverage companies are getting better at basic cyber hygiene. That approach starts with not just understanding what is connected on your plant floor, but understanding its attack surface. In other words, what are those assets’ vulnerabilities? Then use that knowledge to patch them.
To help minimize your risk, consider a security program focused on four key areas:
- Maintain an asset inventory with an emphasis on understanding the attack surface or vulnerability.
- Manage vulnerability, patch and configuration. Have programs in place to address known vulnerabilities, patch regularly and have mature processes around how configuration changes are made and tracked.
- Employ backup and recovery mechanisms for all critical assets to verify you have the ability to quickly pull from a known good backup.
- Complete regular risk assessments to measure risk and manage it. Use the assessments to show your organization the level of risk they are exposed to and the resources — time, money, people — needed to mitigate it.
Successfully implementing these tenets of basic cyber hygiene are the first steps in building an effective cyber security program, and improving your ability to defend against future cyberattacks.
Obsolescence and Cyber Risk
A key tenet of basic cyber hygiene is the ability to address known vulnerabilities. But in some instances, a vendor might no longer support a critical asset. Consider the following questions when evaluating the overall risk of maintaining obsolete hardware or software:
- What is the impact of someone exploiting this vulnerability?
- Is there a way to address this vulnerability through the application of an alternative mitigating control?
- If not, can I justify migrating to a supported platform/solution/product set for this application?
Answers to these questions become the basis for your discussions around mitigation and migration. You can begin budgeting funds to move from basic cyber hygiene to an industrial cyber program that allows you to continually evaluate risk and match funding and resources to keep that risk to a minimum.
For all the benefits smart manufacturing can offer, it also requires a more comprehensive approach to security. Seamless connectivity and smart devices are the catalysts to smart manufacturing — they but can also be a conduit for security threats.
These basic steps can help secure your infrastructure, protect assets and maintain network availability.
The Journal From Rockwell Automation and Our PartnerNetwork™ is published by Putman Media, Inc.