In today’s dynamic manufacturing landscape, cybersecurity has become a serious concern. A recent collaborative study, Advancing Digital Transformation in a Time of Unprecedented Cybersecurity Risk, conducted by Manufacturers Alliance and Fortinet delves into the challenges being faced and the strategies being adopted by manufacturing companies as they navigate escalating risks.
For manufacturers, cybersecurity is no longer an abstract concept that other people have to worry about. Threats have become real as more manufacturers and suppliers are affected by high-profile breaches that have resulted in serious data and financial losses.
Although manufacturers are at different levels in terms of their preparedness, they all face the same overriding issue. For every process they digitize, they expand their attack surface and increase their cybersecurity risk. Connected devices on the factory floor are often targeted by cybercriminals because they contain intellectual property, and because even one day of downtime can cost a manufacturer millions of dollars in lost revenue.
Cybercriminals are organized and it’s no secret that today’s attacks are both sophisticated and relentless. Manufacturers are paying attention and working on improving their security, but staying ahead of cybercriminals is more challenging than ever.
The study released in November 2023 offers a comprehensive look into the state of cybersecurity in manufacturing. Based on a survey of 155 U.S.-based manufacturing companies and interviews with IT and OT executives, the study represents a diverse range of company sizes and industries. It builds on a related 2020 study and indicates the areas where companies have made progress, and where they may have stalled over the last three years.
Five key findings offer insights into the current state of collaboration between Information Technology (IT) and Operational Technology (OT), promising tactics, and the impediments hindering progress.
1. IT/OT Collaboration
The study underscores that successful collaboration between IT and OT teams is pivotal to the success of digital initiatives in manufacturing. In the study, 84 percent of companies envision IT and OT teams working more closely in the future. The synergy between these departments is essential for achieving mutual goals that strike a balance between security and operational priorities. Sharing scarce skilled talent is also a key element for effective collaboration.
2. Renewed Focus
With the increasing shift from theoretical threats to real cyberattacks, manufacturers are intensifying their focus on cybersecurity. The study reveals a notable surge in the percentage of respondents ranking cybersecurity as a top-five business risk, reaching 78 percent, compared to 70 percent in 2020. Notably, manufacturers are particularly concerned about extortion through ransomware, with 36 percent falling victim to such attacks in the past year.
Last year, more than 80 percent of respondents experienced at least one breach that resulted in unauthorized access to data. And of those respondents, 15 percent experienced six or more breaches. The most common types of security incidents they reported were phishing, malware, spyware and ransomware.
3. OT System Visibility
Securing OT environments requires enhanced visibility into systems. Manufacturers are making strides in this regard, with 48 percent conducting audits or assessments related to OT security within the past six months, up from 44 percent in 2020. Regular evaluations, technology reviews, and scrutiny of third-party vendors are becoming integral components of their cybersecurity strategies.
4. OT Challenges
The challenge of securing old equipment, coupled with a shortage of skilled personnel, remains prevalent. Many organizations face difficulties in addressing legacy equipment issues, adopting a pragmatic "run it until it dies" approach. In the survey, 78 percent pointed to the scarcity of talent and expertise in cybersecurity. This talent shortage exacerbates the struggle to fill open OT security positions, leading to team burnout and increased overall risk.
5. Communication Gaps
Effective communication between IT and OT is identified as a critical factor in the aftermath of a breach. The study reports that 82 percent of surveyed companies perceive ineffective communication as a barrier to an efficient breach response. Bridging this communication gap is a crucial aspect of any effective cybersecurity strategy.
As manufacturers evaluate strategies for competitive growth through the integration of new technologies, the need to incorporate robust cybersecurity measures becomes critical. The study suggests that despite progress, manufacturers may need to expedite their efforts to outpace today’s rapidly evolving OT threats.
Facilitating seamless IT/OT collaboration and addressing communication challenges are essential steps in fortifying cybersecurity defenses within the manufacturing sector. To learn more about how manufacturers can include cybersecurity into their digitization plans, download the full report.
