Operational technology security in smart manufacturing
By Alex Mosher, Senior Vice-President of Global Enablement at Armis The business needs of Operational Technology (OT) environments are rapidly evolving where systems are increasingly connected to both enterprise networks and externally to the internet, exposing them to new and emerging cyber threats. This means that security becomes strategically important for OT, IT, and business stakeholders in the manufacturing sector. According to a study conducted by Forrester Consulting, 66% of manufacturers have experienced a security incident related to IoT devices over the past two years. Believe it or not, OT devices in industrial and manufacturing environments often have no built-in security, nor can you install a security agent on them. They were designed this way by manufacturers operating on the now invalid assumption that these devices would not be installed on a network that conveys any type of threat. The same devices are now exposed to many types of cyber threats leaving the manufacturing sector vulnerable. The fact that OT devices cannot accommodate security agents robs security managers of visibility to what the device is, what risks it harbors, and whether it is behaving outside the norm. Not only are OT devices increasingly vulnerable to attack, but they typically are not able to accommodate a security agent that could monitor and protect the device from attack. This design choice allows the device manufacturer to maximise economy and power efficiency, which in the past (and arguably still) have been seen as more important than security. Alex Mosher, Senior Vice-President, Global Enablement at Armis, talks to NZ Manufacturer about the strategies involved in managing IT/ IoT/ OT device security in the manufacturing, advanced manufacturing, and smart manufacturing space. Andrew, thank you so much for your time. What are the challenges manufacturing companies face when managing OT devices? With automation and smart devices […]