{"id":33252,"date":"2021-05-24T22:59:52","date_gmt":"2021-05-24T14:59:52","guid":{"rendered":"https:\/\/version-2.com.sg\/?p=33252"},"modified":"2021-05-24T22:59:52","modified_gmt":"2021-05-24T14:59:52","slug":"industrial-control-systems-security-are-ot-and-it-partners-or-enemies","status":"publish","type":"post","link":"https:\/\/greycortex.hk\/zh\/2021\/05\/24\/industrial-control-systems-security-are-ot-and-it-partners-or-enemies\/","title":{"rendered":"Industrial Control Systems Security: Are OT and IT Partners or Enemies?"},"content":{"rendered":"<div data-elementor-type=\"wp-post\" data-elementor-id=\"33252\" class=\"elementor elementor-33252\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-4da8c5f9 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"4da8c5f9\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-133ba185\" data-id=\"133ba185\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-1c4c3258 elementor-widget elementor-widget-text-editor\" data-id=\"1c4c3258\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"clearfix text-formatted field field--name-body field--type-text-with-summary field--label-hidden field__item\"><p><strong>Security incidents in industrial environments are not exceptional. There were times when it was enough to throw a\u00a0lever to restart a\u00a0power plant if an attack occurred. But with many organizations undergoing digital transformations, the recovery of an industrial infrastructure from cyberattacks now takes much longer.<\/strong><\/p><p>Information technology (<span class=\"caps\">IT<\/span>) networks and operational technology (<span class=\"caps\">OT<\/span>) networks have many differences, as do the people who take care of these environments. But their security has some common elements as well. There\u2019s always going to be incidents that go across the borders \u2013 incidents in <span class=\"caps\">IT<\/span> that come from <span class=\"caps\">OT<\/span>, and vice versa. Also with the advent of Industry 4.0, automation and intelligent control, the air-gap has become a\u00a0myth. <span class=\"caps\">OT<\/span> no longer sits\u00a0alone.<\/p><p><img decoding=\"async\" data-recalc-dims=\"1\" class=\"img-fluid\" src=\"https:\/\/i0.wp.com\/www.greycortex.com\/sites\/default\/files\/perm\/image\/divider.png?w=1200&#038;ssl=1\" \/><\/p><p>In 2020, there was a\u00a0ransomware attack on a\u00a0water company in a\u00a0mid-sized European city. At first, it was purely an <span class=\"caps\">IT<\/span> problem. Just after the attack, the company deployed <a href=\"https:\/\/www.greycortex.com\/mendel\"><span class=\"caps\">GREYCORTEX<\/span> Mendel<\/a> to audit their infrastructure. Mendel found out that hackers still had access to the systems and more attacks could come. And they would spread to the <span class=\"caps\">OT<\/span> network. In that case, local people would have been lucky because they could have still drunk clean water. But nature wouldn\u2019t be so fortunate \u2013 untreated wastewater would be discharged into the river uncontrollably. So luckily for the people and the environment, the biggest loss was for the company \u2013 it cost them \u200b<span class=\"pull-double\">\u201c<\/span>only\u201d three days of income.<\/p><p><img decoding=\"async\" data-recalc-dims=\"1\" class=\"img-fluid\" src=\"https:\/\/i0.wp.com\/www.greycortex.com\/sites\/default\/files\/perm\/image\/divider.png?w=1200&#038;ssl=1\" \/><\/p><p>Despite this, in <span class=\"caps\">GREYCORTEX<\/span>, we repeatedly notice that <span class=\"caps\">IT<\/span> and <span class=\"caps\">OT<\/span> teams do not cooperate. And cybercriminals know it. On top of that, there are just a\u00a0few experts who can sufficiently understand both\u00a0areas.<\/p><p>But there\u2019s good news! Both parties can benefit from each other\u2019s knowledge and experience. It is only necessary for them to find common ground:<\/p><ul><li>The main priority for <strong><span class=\"caps\">IT<\/span> experts<\/strong> is data and its confidentiality. They understand the use of exploits and vulnerabilities and they have an overview of security products, their abilities and market innovations.<\/li><li><strong><span class=\"caps\">OT<\/span> experts<\/strong>, on the other hand, place an emphasis on the security and availability of assets and processes. They have a\u00a0deep understanding of complicated industrial environments and devices that are programmed completely differently to ordinary computers. <span class=\"caps\">OT<\/span> experts know what is going on in operational networks, how they work and what can happen there. They know the risks of possible security incidents very well because their impact is usually much more devastating than in an <span class=\"caps\">IT<\/span> environment.<\/li><\/ul><h2>Identify Worst-Case Scenarios<\/h2><p>As a\u00a0complete digital transformation is taking place, we start to get into a\u00a0more homogenous infrastructure. So that\u2019s why the knowledge of <span class=\"caps\">IT<\/span> and <span class=\"caps\">OT<\/span> teams should be merged. And what should both teams talk about? Imagine <strong>the worst day at work<\/strong> you can\u00a0have:<\/p><p>An explosion that kills several people. Industrial espionage and the leakage of unique know-how. Or maybe a\u00a0few days of unplanned downtime that costs the company millions.<\/p><p>Starting to see the picture? So, let\u2019s focus together on these questions:<\/p><ul><li>What systems can cause the biggest disasters?<\/li><li>How can you reduce known\u00a0risks?<\/li><li>Do you have an incident response plan or recovery plan?<\/li><li>How do you monitor required policies and configuration?<\/li><\/ul><p>Now, you are on a\u00a0good path to successful cooperation. And all the effort towards a\u00a0joint discussion should be supported by a\u00a0easy-to-use tool that can be used in both worlds. Because many principles of <span class=\"caps\">IT<\/span> security can also be used in an <span class=\"caps\">OT<\/span> environment.<\/p><h2>Proper Security Monitoring<\/h2><p>One of the most important key prerequisites for ensuring network security is <strong>to see and\u00a0know:<\/strong><\/p><ul><li>what exactly is in your network\u00a0<\/li><li>and how are these assets connected?<\/li><\/ul><p>As soon as you know about all devices, how they communicate with each other, what version of firmware they have installed, who their administrator is, who has access to them, what security policies are set and how they are followed, any discrepancy will easily start showing a\u00a0warning signal.<\/p><p>This is exactly why <span class=\"caps\">GREYCORTEX<\/span> Mendel came into being. Based on intelligent traffic analysis, Mendel can detect any anomalies. It identifies and visualizes all above, learns and detects the early stages of cyber attacks as well as infrastructure vulnerabilities that can be exploited by potential attackers.<\/p><p>One of the biggest difficulties of <span class=\"caps\">OT<\/span> networks is the combination of new and old devices. Sometimes, everyone even prays that they still work. Add to that the fact that many suppliers do not follow the principles set by the manufacturer and ignore manuals. In these situations, Mendel can give you the assurance that you\u00a0need.<\/p><p>To sum it all up, Mendel will find any shortcomings in your infrastructure that the security team would not normally detect. Thanks to the time saved, you can devote yourself to other tasks that there was no time for previously.<\/p><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"<p>Security incidents in industrial environments are not exceptional. There were times when it was enough to throw a\u00a0lever to restart a\u00a0power plant if an attack occurred. But with many organizations undergoing digital transformations, the recovery of an industrial infrastructure from cyberattacks now takes much longer. Information technology (IT) networks and operational technology (OT) networks have [&hellip;]<\/p>","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_coblocks_attr":"","_coblocks_dimensions":"","_coblocks_responsive_height":"","_coblocks_accordion_ie_support":"","advanced_seo_description":"","jetpack_seo_html_title":"","jetpack_seo_noindex":false,"jetpack_seo_schema_type":"","_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_wpcom_ai_launchpad_first_post":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_post_was_ever_published":false},"categories":[23,20,21],"tags":[24,22],"class_list":["post-33252","post","type-post","status-publish","format-standard","hentry","category-year2021","category-greycortex","category-press-release","tag-24","tag-greycortex"],"jetpack_featured_media_url":"","jetpack_shortlink":"https:\/\/wp.me\/paZ0Rf-8Ek","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/greycortex.hk\/zh\/wp-json\/wp\/v2\/posts\/33252","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/greycortex.hk\/zh\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/greycortex.hk\/zh\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/greycortex.hk\/zh\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/greycortex.hk\/zh\/wp-json\/wp\/v2\/comments?post=33252"}],"version-history":[{"count":0,"href":"https:\/\/greycortex.hk\/zh\/wp-json\/wp\/v2\/posts\/33252\/revisions"}],"wp:attachment":[{"href":"https:\/\/greycortex.hk\/zh\/wp-json\/wp\/v2\/media?parent=33252"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/greycortex.hk\/zh\/wp-json\/wp\/v2\/categories?post=33252"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/greycortex.hk\/zh\/wp-json\/wp\/v2\/tags?post=33252"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}