Velta Technology

AI in Industrial Cybersecurity

Thu, 31 Oct 2024 10:36:44 -0700

Technology evolution in the industrial cybersecurity space continues to evolve at breakneck speed. Solutions currently available are beyond what anyone could have imagined even 10 years ago.

As manufacturing and critical infrastructure environments become increasingly digitized and interconnected, artificial intelligence has now emerged as both a useful defense technology and a potential risk vulnerability in industrial cybersecurity.

The Promise of AI in Industrial Environments

For manufacturing and critical infrastructure organizations, AI offers several game-changing capabilities in cybersecurity.

Anomaly Detection

AI speeds up the ability to identify unusual patterns or behaviors on industrial networks.

Real-Time Threat Detection

AI-powered systems can speed up and offer improved accuracy of threat detection.

Predictive Analytics

By analyzing historical data and current trends, AI can forecast and alert of potential future threats.

Automated Response

AI can automate alerts to potential threats potentially faster and more accurately than previous technologies.

Continuous Learning

The nature of AI allows for continuous machine learning offering more accurate predictive insights to new attack vectors and potential evolving threats.

Cross-Organizational Benefits

Both IT and operational technology (OT) environments may greatly reduce incident response times by using AI-powered advanced threat detection to detect complex attacks, including...Read More

National Cybersecurity Awareness Month

Wed, 16 Oct 2024 13:50:27 -0700

In the complex ecosystem of industrial cybersecurity, October takes on a significance beyond the changing seasons: it's Cybersecurity Awareness Month. For those dedicated to safeguarding our critical infrastructures, this month is a clarion call.

It's not always the most glaring threats or the latest high-tech solutions that define our defense strategy. Rather, it's the nuanced understanding of often-overlooked vulnerabilities that sets apart effective protection.

As we navigate through this month dedicated to heightened vigilance, let’s draw upon years of industry expertise to spotlight five subtle yet pressing threats, shedding light on their implications and the holistic measures we can employ to fortify against them.

1. Legacy System Vulnerabilities: Legacy systems, while reliable and familiar, can often become the Achilles heel of an organization's security framework. It's like having a vintage car: beautiful and nostalgic but lacking the safety measures of contemporary models.

Without modern cybersecurity designs, these systems can be riddled with vulnerabilities, turning them into low-hanging fruits for cyber attackers. Undertaking meticulous assessments, bolstering security controls, and making well-informed decisions about upgrades or system isolations are not just recommended—they're essential.

2. Supply Chain Risks: Our globally intertwined supply chains, while fostering efficiency and collaboration, are not without their caveats. A minor lapse in one part of the chain can send shockwaves throughout, leading to cascading security breaches.

Given the intricacies and dependencies, companies should not just trust but actively verify the cybersecurity posture of every single partner, reinforcing contracts with clear-cut security mandates.

3. Insider Threats:...Read More

Cyber Threats to Critical Infrastructure: Government Intervention

Thu, 20 Jun 2024 12:14:51 -0700

Actions by the U.S. federal government highlight the escalating threat of cyberattacks on critical infrastructure and private industry. Hear more in one of our recent podcasts.
In an unprecedented move, federal agencies earlier this year, began actively intervening to remove malware and other cyber threats from private networks, even obtaining court orders to do so in some cases.
This shift in tactics underscores the severity of the situation and the potential for widespread disruption.
The federal government is now obtaining legal warrants to breach private industry networks in pursuit of malware and other attacks deployed by foreign actors.
The Chinese Communist Party has been identified as a primary culprit in many of these intrusions. This proactive approach represents a significant change from previous practices of monitoring and advising.
Now, agencies are taking direct action when they detect serious threats, even if it means disrupting business operations in the process.
The targets of these attacks extend far beyond traditional military or government systems. Critical infrastructure like power grids, water treatment facilities, transportation networks, and key industrial supply chains are all at risk.
Even smaller businesses and those not directly involved in critical sectors may find themselves vulnerable to collateral damage or as stepping stones for attackers to reach higher-value targets.
A key challenge is that many organizations lack the sophisticated cybersecurity capabilities needed to detect and respond to advanced threats. This gap in security readiness leaves critical systems exposed and necessitates government intervention in extreme cases.
Read More

The Rise of XIoT

Thu, 30 May 2024 10:54:27 -0700

The rapid advancement of technology has led to the emergenceof the Extended Internet of Things (XIoT), a phenomenon that has revolutionized industrial manufacturing and critical infrastructure.
XIoT refers to the convergence of traditional operational technology (OT) with the Internet of Things (IoT), extending the scope of connected devices beyond consumer applications to include industrial control systems, critical infrastructure, and enterprise environments.
This integration has brought many benefits such as increased efficiency, data-driven decision making, and remote monitoring capabilities. However, it has also introduced a new set of cybersecurity challenges that organizations must address to protect their assets and maintain the integrity of their systems.
Several key developments have contributed to the rise of XIoT in industrial manufacturing and critical infrastructure.
1.    The proliferation of smart sensors, actuators, and connected devices has enabled greater integration and data exchange between OT and IT systems. This increased connectivity has paved the way for more streamlined operations and real-time monitoring of industrial processes.
2.    The drive toward Industry 4.0 which emphasizes automation, data-driven decision making, and remote monitoring, has accelerated the adoption of connected devices in industrial environments.
3.     Many organizations are connecting older legacy OT systems to modern networks, creating complex XIoT environments that require careful management and security considerations.
While the benefits of XIoT are significant, failure to secure these environments can expose organizations to a range of risks. One of the most pressing concerns is the potential...Read More

Bridging the Asset Inventory Divide Between IT and OT

Thu, 14 Mar 2024 11:18:03 -0700

An accurate asset inventory lays the foundation of any cyber risk management program. However, while IT teams commonly have extensive visibility into hardware and software assets on enterprise networks, operational technology (OT) environments lack this basic oversight.
Unpatched Windows systems, undocumented IoT devices, obscure proprietary protocols, and unfamiliar embedded gear intermingle on the plant floor. With production continuity the priority over security in OT environments, blind spots exist. As external threats explode, understanding the distinct OT challenges inhibiting asset visibility is imperative.
IT: Network Scans and Central Oversight
Inventory management comes naturally in IT environments. Server scans, endpoint agents and centralized oversight deliver hardware/software insight down to granular details. But these IT approaches falter in industrial terrain, where availability rules and a wide variety of technology prevails. Industrial facilities house devices never designed for scrutiny, let alone cyber risks.
OT: Black Box Opacity and Distributed Gear
Control panels filled with drives, sensors and switches enabling automated assembly, comprise complex, interdependent “black boxes”. Their proprietary designs focus solely on physical output, not inspect ability. With remote facilities each containing unique logic, securing OT as a collective pushes operations teams outside their expertise and comfort zones.
Read More

The Evolving Role of Cyber Insurance in Managing Cyber Risk

Mon, 18 Dec 2023 11:35:56 -0800

As cyber threats proliferate across IT and operational technology (OT) environments, organizations seek to better understand their cyber risk exposures and how to mitigate them. Insurance plays a pivotal yet often misunderstood role in protecting against losses from breaches, ransomware, and industrial control system attacks. Cyber insurance should be
one component within an overall risk management strategy.
According to veteran insurance professional Rogan Dwyer, formerly of Lloyd’s of London, whom we interviewed on a recent podcast; companies too often view their cyber policy as their primary line of defense rather than the last resort when other safeguards fail. This misconception leaves dangerous coverage gaps once an incident occurs. He explains that insurance should function as a last resort once other controls fail rather than a wholesale transfer of liability to the carrier.
Dwyer advises boards of directors to actively participate in crafting an insurance strategy tied closely to internal cybersecurity and technology frameworks. He advises that Boards must take greater responsibility for fully grasping the protections that policies actually provide, along with their limitations. It still requires policy holders to implement proactive security and incident response capabilities across their IT and OT organizations and technologies internally.
The reality is, insurers themselves struggle to keep pacewith the current rate and complexity of cyber threats, applying outdated methods ill-suited for this dynamic landscape. Annual applications supply minimal data for underwriting while focusing heavily on affirmative risks like property damage rather than silent non-affirmative risks that prove more costly, like business interruption from unplanned or unscheduled downtime – whether from an external cyber event or internal causes. Audits happen sporadically, revealing an organizations’ true vulnerabilities only after attacks have already...Read More

Why Private Companies Can't Afford to Look The Other Way

Thu, 14 Sep 2023 15:45:17 -0700

The contemporary corporate realm is witnessing a seismic shift. With the recent modifications in the Securities and Exchange Commission's (SEC) cybersecurity disclosure regulations, public companies are suddenly finding themselves under greater scrutiny. Expectations have risen for greater transparency and associated accountability. Today, any complacency in the industrial security landscape can have serious repercussions.
As public companies prepare to comply with the immanent reporting requirements for adverse cyber events, it's crucial for private sector leaders to be proactive in anticipating likely changes ahead for their organizations as well. How likely are large private organizations to be immune
to this evolving trend? The cyber event reporting standards for public companies are likely to permeate the private sector, enhancing the need for private companies to prepare now for potential reporting requirements.
So, how should both public and private entities, especiallythose in the Operational Technology (OT) / Industrial Control System (ICS) functional areas, navigate this terrain? Here’s what the experts at Velta Technology advise:
Integrity & Readiness: Whether you're a global conglomerate or a regional operator, the edict remains consistent: develop a culture where cybersecurity is everyone’s responsibility. The aim shouldn't be mere compliance but fostering genuine transparency, safeguarding stakeholder trust, and ensuring a seamless operational flow.
Holistic Defense Strategy: Patchwork solutions won't cut it. In a world riddled with complex cyber threats, companies need a comprehensive defense framework. This involves everything from fundamental plant floor asset discovery, sophisticated threat...Read More

The #1 Risk with ICS Cybersecurity Budgets

Tue, 08 Aug 2023 14:13:56 -0700

A heavy reliance on OT systems is characteristic of the manufacturing industry, but the accelerating digitization trend introduces new and escalating risks. Increased connectivity of industrial control systems (ICS) to the internet opens possibilities for cyberattacks targeting critical systems. A compromised OT system can lead to severe consequences, including production downtime, equipment damage, revenue disruption, and threats to human safety. As such, the protection of these OT systems has become a top priority, essential for ensuring uninterrupted operations and mitigating potential catastrophes.
Yet, achieving this protection is a complex process, starting with the challenge of identifying who owns the OT cybersecurity budget. In most organizations, OT cybersecurity is still a new practice, largely controlled by IT departments. This approach can lead to confusion and
inadequate protection of OT assets due to the IT staff's lack of familiarity with ICS architecture, infrastructure, process, and operations requirements. Despite this, Gartner reports that most organizations remain in the discovery or firefighting phases of OT cybersecurity, with only a few actively implementing and operationalizing security solutions.
Understanding the facility's asset inventory is another crucial aspect of effective cybersecurity planning. Without an accurate inventory, allocating budgets for OT security becomes an uphill battle. The reality is that 99% of organizations are unsure or struggle recognizing (example; HVAC) the number of OT assets they have within their ICS environment, making it difficult to identify potential entry points for malicious actors. Furthermore, only a fraction of organizations have deployed sensor technologies to collect east-west traffic within the ICS, and...Read More

How Do You Choose a Cybersecurity Partner and Not Just a Vendor?

Mon, 17 Jul 2023 16:45:04 -0700

It’s not uncommon for companies to establish a list of technical criteria, complete an RFP and select a vendor. Choosing an industrial cybersecurity solution should go beyond the RFP technical specs and features criteria, to ensure you select a ‘partner,’ and not just a vendor.
Any company that offers industrial cybersecurity, can sell cybersecurity features and services as a vendor. A partner will go beyond products and services to collaborate with you to understand your organization, work effectively across your internal teams, and be technology neutral in order to most effectively meet your needs. A partner should be knowledgeable of your existing and newly purchased technology and work to prioritize and protect the security of your industrial assets.
As you embark on this journey of finding an OT cybersecurity partner, rather than a vendor, there are five key factors to keep in mind. By keeping these considerations at the forefront, you can ensure your organization achieves optimal security outcomes while forging a valuable long-term partnership.
1. Prioritize the Process   Making the process a top priority is crucial to choosing the right OT partner. Your team must be able to comprehend the technology being offered and possess the necessary skills to utilize it effectively. Rather than forcing your organization to adapt its processes to accommodate the latest technology, a partner should be capable of providing technology that aligns seamlessly with your existing workflows. While some training may be required to fully adapt to the new technology, it should not disrupt your organization's workflow entirely. Avoiding such...Read More

Bolstering OT Cybersecurity: Questions Board Members and C-Suite Executives Should Be Asking

Tue, 06 Jun 2023 10:29:04 -0700

As the prevalence of cyber threats continues to grow, board members and C-suite executives must proactively bolster their organization’s security measures. This means asking tough questions and making necessary improvements to ensure the safety of industrial operations and critical infrastructure.
According to studies conducted by Deloitte Center for Industry Insights and ThoughtLab Group, many executives are ill-equipped to handle cyber threats from external sources. Shockingly, 29 percent of CEOs and CISOs, along with 40 percent of chief security officers, have confessed to feeling unprepared for the rapidly evolving nature of cyber threats. Gartner’s alarming prediction that 75 percent of CEOs will be held personally accountable for any cyber-security breaches by 2024 serves as a warning to prioritize digital safety to avoid any liability. No longer can we turn a blind eye or be indifferent to the issue of OT cybersecurity.
The same survey done by the Thought Lab Group revealed that we can expect more social engineering and ransomware attacks as nation-states and cybercriminals become more active. These attacks will likely exploit vulnerabilities caused by software misconfigurations, human error, poor maintenance, and unaccounted assets. Considering the global cost of cybercrime
has reached $8 trillion, it’s essential for corporate executives to take proactive,...Read More