2017 was a year in which industry seemed to become more focused on cybersecurity. But with so much activity in this sector, making sense of it all is tough. Here are some insights into potential new developments for 2018.<\/p>\n
Outside of critical infrastructure and large global companies, most manufacturers have eyed the need for cybersecurity protection somewhat at arms length. They know they need it and they have increasingly been taking serious steps to better protect their systems. In response, the industrial cybersecurity market has generated a lot of helpful information and expanded with the addition of several new companies.<\/p>\n
See the Automation World article on how manufacturers and processors are handling calls for greater cybersecurity while still looking to maintain air gaps between their control systems and the outside world.<\/strong><\/em><\/p>\n Eddie Habibi, founder and CEO of PAS\u2014a cybersecurity and asset and operations management technology supplier\u2014recently shared his thoughts on what he called \u201cseven seismic trends\u201d he expects to take place in relation to industrial cybersecurity in 2018.<\/p>\n Disclosing a Critical Infrastructure Cyber Attack Will Be Mandatory<\/strong> Nation-State Cyber Alliances Will Become the New Norm<\/strong> Cybersecurity and Process Safety Will No Longer Operate in Silos<\/strong> Companies Will Demand Supply Chain Security<\/strong> ICS Will Jump into the Cyber Insurance Game<\/strong> The \u201cKaspersky Effect\u201d Will Spread<\/strong> Watch the OT Security Market Thin Out<\/strong> Look for a feature article from Automation World<\/em> in February 2018 that will help you make sense of the growing industrial cybersecurity market.<\/p>\n","protected":false},"excerpt":{"rendered":" 2017 was a year in which industry seemed to become […]<\/p>\n","protected":false},"author":1,"featured_media":914,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[13],"tags":[],"yoast_head":"\n
\nHabibi notes that the lack of a mandate to disclose attacks on corporations \u201ccontinues to hinder accurate intelligence gathering and the development of targeted defensive strategies against an evolving threat landscape.\u201d He expects the U.S. will follow the European Union\u2019s lead, and that Congress will begin to hold hearings that include mandating disclosures of cyber attacks within certain critical infrastructure industries.<\/p>\n
\nAs an added step beyond new governmental requirements, such as the mandatory disclosure example listed above, Habibi thinks countries will begin discussing the creation of cybersecurity alliances. \u201cEstablishing these alliances will provide mutual defense for all countries involved and will allow for the sharing of intelligence in the face of attributed nation-state attacks, not to mention agreements to not attack each other,\u201d he said. Habibi added that the idea of cyber-physical non-proliferation treaties will begin gaining traction. He said that such treaties will \u201clikely forgo any promise of governmental investigation when non-critical infrastructure companies or individuals are the target of cyberattacks.\u201d<\/p>\n
\nWe\u2019ve been covering the integration of IT and operations technology (OT) in industry quite a bit\u2014and for good reason\u2014as this is where the rubber will meet the road in terms of cybersecurity. \u201cThe process industries have long depended on technologies, such as Emergency Shutdown and Safe Operating Limit systems, to mitigate and minimize the consequences of a catastrophic incident,\u201d Habibi said. \u201cAs these systems take on the dual role of cyber defense, we predict that companies will require tight integration between cybersecurity applications and their operational risk and safety management strategies.\u201d<\/p>\n
\nIf nothing else causes small to mid-sized manufacturers to take note of their need for greater cybersecurity protections, demands to do so from the companies they supply could be the turning point. Habbi said he expects companies to begin placing greater demands on their suppliers for security certifications and audit reporting. \u201cCyber supply chain certification requirements will have similarities to process improvement programs, such as Six Sigma, demanding suppliers implement and abide by cybersecurity best practices,\u201d he said.<\/p>\n
\nHabibi noted that, because most operations technologies are \u201cinvisible to security personnel, insurance companies have long faced challenges understanding true risk within a facility and will continue to struggle with writing policies specific to these environments.\u201d However, industrial companies that can \u201cgain visibility into all their cyber assets, as well as monitor and mitigate risk, will have better options for insuring the heart of their operations,\u201d he said. To aid this, Habibi expects to see more comprehensive ICS cybersecurity policies offered by insurance companies.<\/p>\n
\nRussia has been in the news so much this past year that you may have missed moves by the U.S. federal government to ban the use of Kaspersky anti-virus software on government systems. The U.S. military was the first to do so, well in advance of other federal agencies. However, Habibi cautioned that Russia should not be our only concern in this area. \u201cOther countries have shown similar nationalistic tendencies, such as China and its recently passed, far-reaching cybersecurity law that requires access to vendor source code,\u201d Habibi said. \u201cWe predict that the U.S. Executive Branch will show similar tendencies and direct government agencies to exercise procurement preference for vendors with development and manufacturing in the U.S. or allied countries. Software companies will form a loose coalition to lobby for global standards for protection of intellectual property considering the burgeoning cybersecurity risks.\u201d<\/p>\n
\nWith all the new entrants into this space over the past two years, the thinning of the ranks in this sector in not unexpected. Habibi expects some of these startups will \u201cstruggle to gain significant market adoption from industrial companies concerned with business continuity and safety,\u201d he said. \u201cExpect network anomaly detection companies with significant market share in enterprise IT to enter the OT market through acquisitions and alliances, ushering in a new phase of consolidation.\u201d<\/p>\n