Magazine menu Close Magazine menu

Internet of things

Latest stories

ar vr cybersecurity

Does virtual and augmented reality mean augmented cybercrime too?

  • min read
    • Not so long ago, augmented reality (AR) and virtual reality (VR) were the stuff of science fiction. Now they've become more than just niche experimental technologies. They're rapidly entering the mainstream, particularly in the consumer world of interactive media. But it's not just things like video games that are being transformed by the rise of VR platforms – there are some promising business cases for AR and VR too. In fact, some experts estimate that they will become indispensable technologies in the business world by as early as 2025. What is augmented and virtual reality? Although augmented and virtual reality are closely related, they're not the same thing. AR 'augments' the real world around the user by adding digital elements to the real-world view. Perhaps the most familiar example is the mobile game Pokémon Go, as well as less successful products like the infamous Google Glass. VR, by contrast, provides a far more immersive experience, since it relies on shutting out the physical world entirely. Popular VR devices include gaming platforms like HTC Vive and Oculus Rift, as well as lower-tech and more affordable experiences like those offered by Google Cardboard. Another term you'll encounter is mixed reality (MR), which refers to experiences that combine elements of both VR and AR. One of the best-known examples is Microsoft HoloLens, an MR platform designed specifically for business applications. What are the business applications of augmented and virtual reality? Rapid prototyping One of the most promising applications is product prototyping, a process which involves creating a complete digital model of a product (or, a so-called digital twin) and merging it with a VR experience. This allows for extensive testing and ideation without the high costs of developing multiple physical prototypes. Employee training Another popular business application, and one that's already entering mainstream use, is employee training. By applying VR or AR to training programs, it's possible to build a safe and highly interactive simulated environment with real-time feedback. Similarly, AR and VR can help improve workplace safety, especially in hazardous environments, be they workshop floors or nuclear reactors. AR can also help workers assemble, operate and maintain complex machines by providing real-time information overlaid onto their headsets. These are just a few of the exciting applications of augmented and virtual reality. And, though they might still sound like science fiction to the layperson, they're actually not. Companies like Ford, Airbus and Sotheby's are already using them. The wearable camera problem Augmented reality headsets depend on their abilities to understand the local environment, which means cameras are often essential components and they can pose a security risk. Ever since the first Google Glass prototype was released to much fanfare back in 2013 (only to fail miserably by 2015), there have been growing concerns around privacy and security. The launch of Google Glass even gave rise to the colorful term 'glasshole', which refers to those people who behaved inappropriately while using the device (such as by spying on others and taking photos without their knowledge). But edgy names aside, this has serious implications in fields such as healthcare where organizations are subject to strict compliance regulations like HIPAA to protect patient privacy. A new frontier for social engineering Aside from privacy concerns, AR and VR devices are connected like any other. They're part of a rapidly growing global network that's often dubbed the Internet of Things (IoT). And, like any connected device, they handle the transmission and storage of data, which might be misappropriated by hackers. When it comes to the immersive experiences of AR and VR, this has especially worrying potential in corporate espionage and social engineering. When technology can reach the point of convincing the brain it's somewhere where it's not, the opportunities for taking advantage of human vulnerabilities are enormous. As with any technology, the weakest link is normally the users themselves, which makes AR and VR a unique target for exploiting people. For example, attackers might inject features into VR platforms designed to mislead users into giving away personal information. There are also new implications for ransomware, in which attackers could sabotage platforms and interrupt important meetings before asking for a ransom. VR and AR experiences are only going to get more immersive and more realistic. On the one hand, this might make them more engaging and widely used. On the other, it makes them more dangerous. Fake identities, or so-called 'deepfakes' generated by machine-learning technologies, for example, allow for the manipulation of voices and videos to the extent they still look like genuine footage. If a hacker could access the motion-tracking data from a VR headset, they could potentially use it to create a digital replica. They could then superimpose this on someone else's VR experience, such as an immersive business conference, to carry out a social engineering attack. With people interacting more and more through avatars, this brings an entirely new dimension to the disturbing world of cybercrime. Data breach risks Aside from potentially providing cybercriminals with new ways to manipulate their victims, VR and AR present all the classic cybersecurity risks too. As systems that transmit and store data, they're fair game for anyone wanting to get their hands on the most valuable commodity in the world: personal data. They're also possible targets for denial of service attacks (DDos), which could have very serious implications for those depending on AR in critical situations such as surgical procedures or when operating dangerous machinery. Mitigating the risks isn't as hard as you think To address the risks associated with AR and VR, it's best to start with the core principles of information security – the very same ones that should be governing the wider IT infrastructure across the organization. Although attacks against AR and VR systems manifest themselves in different ways, the technological and administrative measures used to safeguard them are similar to other forms of connected technology. They use the same protocols as any other connected device, so all the standard rules apply – include them in your risk assessments, keep firmware up to date and encrypt any sensitive data. And never take security for granted. Most AR and VR devices don't encrypt data by default, and they may integrate with third-party apps which themselves have dubious security. On top of all the standard measures, AR and VR present some unique challenges, particularly when it comes to physical security and safety. One of the biggest problems with VR specifically is that it completely blocks off a user's visual and auditory connection to the outside world. It's always important to evaluate the physical safety and security of the user's environment first. This also applies to AR, in which it's important for users to maintain a high degree of situational awareness, particularly in more immersive environments. And, it should go without saying, but don't run around in a busy workspace wearing a VR headset! Although identity and access management are central to any information security strategy and concern any device, this is an area that's often overlooked when it comes to the adoption of AR and VR systems. You might, for example, be able to identify other people you're working with by their avatars, but there's also the potential risk of the avatar being copied and used by an unauthorized party. Fortunately, used in the right way, AR and VR can potentially improve identity and access management with multifactor authentication (MFA) – for example using eye-tracking sensors to verify your identity before you can access the rest of the system. While the challenges are undeniable, so is the potential of adopting augmented and virtual reality into the workplace.
ATTACHMENT Dglobal cybersecurity priorities

COVID-19 has changed global cybersecurity. What must nations do now?

  • min read
    • During the pandemic, lockdowns and 'shelter in place' orders around the world have done much good. They've not only saved lives, they've shown us our cities without pollution and let businesses realize employees working from home can be more business benefit than business challenge. I spoke about the growing cyberthreat landscape and what we must do about it as part of a high-level leaders discussion on international cybersecurity during the United Nations Internet Governance Forum (IGF) 2020. During the pandemic, cybercriminals used new-found time to hone their skills and test out new methods. We saw a sharp rise in cybercrime of all kinds, from malware to advanced persistent threats (APT.) New hacking groups came on the scene, and with them, new kinds of attacks. New attacks and actors unmasked Here's just a sample of the expansion of cybercrime our researchers detected since the coronavirus pandemic came into our lives. This year we've seen unique malicious file detection rise 20 to 25 percent a day. Most threats, like malware, are relatively easy to deal with. But when what we're seeing is a rise in more professional cybercrime gangs, that's a different story. Kaspersky researchers are now monitoring more than 200 cybercrime gangs who've been launching hyper-targeted attacks against targets such as banks and governments. We've also seen more 'juniors' entering cybercrime. While they're easy to stop now, many will graduate from hacker kindergarten and join the pros. With the increasing use of the internet of things, the number of points where cybercriminals can attack has grown exponentially. We know they're willing and able. Take, for example, one of the most successful global attacks, the 2016 Mirai malware attack on domain name system provider Dyn. It took down hundreds of news websites around the world. How should nations respond to the new threat landscape? The cybersecurity impact of the pandemic has two parts. First, people are at greater risk of cyber-intrusion thanks to working from home and spending more time online. Second, there are more cybercriminals, and they've become better at what they do. Meanwhile, the digital economy has been growing fast. Many businesses decided to use the breathing space and necessity of the pandemic to digitalize new parts of their business. So we're at a place and time when organizations and their customers need to feel confident in these new ways of buying and delivering services. Building that confidence will help economies thrive. So how do we get there? I've got three priorities. Leaders discuss international cybersecurity in the United Nations Internet Governance Forum (IGF) 2020 1. Secure technology by design We can make technologies much more difficult and expensive to compromise, but they must be designed that way from the start. We have operating systems in devices already on the market that are so secure we had to devise a new way of talking about them – so we call this cyber-immunity. The chances of an attack on these systems succeeding means the cost to the criminal of a successful cyberattack is higher than the damage caused. To make critical infrastructure safer, we could deploy cyber-immune technologies across the network. The time to do it is now. 2. Enforcing cybersecurity law on an international level International cooperation is crucial for hunting down cybercriminals, but it looks as though the world isn't going in a 'cooperation' direction – it's becoming more fragmented. We need a space in cybersecurity where nations can cooperate safely, without geopolitical fractures getting in the way. 3. High-level cooperation requires high-level cybersecurity education As well as needing to overcome our differences, international cooperation against cybercrime will require 'cyber diplomats' to stay continually informed about the changing threat landscape. Good news for those imagining a boring slide talk in a dark basement – cybersecurity education keeps pace with innovation and developments in learning science. For example, learning through immersive gamified simulations like Kaspersky Interactive Protection Simulation (KIPS) is popular and effective. While the world recovers from the shocks of the COVID-19 pandemic, we must recognize much has changed, not least in cyberthreats. We need a new era of international cooperation to hunt cybercriminals. We need to make sure 'cyber diplomats' (those who develop and enforce national and international policy against cybercrime) fully understand the threats. As professional cybercrime gangs hone their skills, I predict we'll see cyberattacks grow at every level, harming business and governments. Thankfully, technology keeps evolving, and no one is powerless. Adopting cyber-immune systems will help nations keep the lights, water and internet running at times of crisis and beyond.
smart-hospitals

The hospital of the future: Could smart hospitals deliver better healthcare?

  • min read
    • Population growth. Aging nations. A global pandemic. 2020 has been quite some year for the world's healthcare systems. How can they better handle this triple threat? Healthcare needs are getting more complex, and systems more stretched. To meet the demand for precision healthcare, hospitals need to evolve to become smarter and more efficient. The World Health Organization (WHO) estimates healthcare will face a shortfall of more than 18 million healthcare professionals globally within the next decade. Is it sustainable to increase the workload of already stretched practitioners? Smart hospitals could make healthcare work more efficient and improve the quality of patient care. Smart hospitals and the rise of e-health Smart hospitals are part of the e-health phenomenon. A smart hospital improves patient care using optimized and automated processes, particularly the Internet of Things (IoT), to connect medical devices to AI and data analysis. Smart tech helps healthcare practitioners focus on providing high-quality care while reducing the barriers associated with using complex medical technology. Smart tech means smarter workflows One figurehead of the smart hospital movement is Humber River Valley Hospital, Canada. It's North America's first fully-digital hospital (think: online appointment scheduling, digital check-ins and your test results emailed.) It boasts robots and other tech to automate almost 80 percent of its back-office services like pharmacy, laundry and food delivery. This gives clinical staff more time to give back to patients. Cleveland Clinic Abu Dhabi (CCAD,) UAE, uses digital apps to support treatments. Pre-treatment, patients use apps to communicate with staff. During their stay, they use smart pads to access their info, daily plans and order food. At discharge, the app sends prescriptions to local pharmacies then sends them their bill. Neat. Can robots become care workers? Smart tech could help meet labor shortages: this means more android helpers. During the first COVID-19 outbreak, Wuhan Hospital, China, was staffed entirely by robots for several days. Produced by start-up CloudMinds Technology, they improved patient care and gave respite to over-stretched workers. Smart hospitals can automate and digitize traditional, labor-intensive processes. When healthcare is delivered quicker and more accurately, more people can be treated safer and quicker. Consider Johnson Control's Code Blue Activation system; When a patient reaches critical condition, it calls up an emergency care team in just 24 seconds. Could 3D printing replace donors? There's a relatively new tech in smart hospitals: 3D printing. Imagine the opportunities if surgical teams could print body parts, like prosthetic limbs or dental implants, on-demand. While the tech is in its infancy, there are promising advancements, though it's without the speed and capabilities needed for large-scale adoption. Engineers and medical researchers from the University of Minnesota recently created silicon-made scaffolding' that could benefit those with spinal cord injuries by restoring muscle control. Cells are printed onto the structure then implanted into the patient's spinal cord, with a bridge between cells. Can smart hospitals save lives? Given increased healthcare demands, hospitals may not have any choice but to change. Smart hospitals could improve the care we deliver and benefit our societies. But it will be a group effort. Professor Daniel Kelly, Cardiff University's School of Healthcare Sciences, thinks smart hospitals will be crucial for healthcare. But we have to understand how it will affect everyone, including those funding it. "As treatment for many diseases becomes more personalized, there's an urgent need for health systems to evolve. Smart hospitals are symbolic of a future standard of healthcare where we can remove the reliance on paper records and current digital systems' inefficiencies. Securing the smart hospital From sensitive patient information to medical records, it's easy to see why cybersecurity is a hot topic in healthcare. Hospital data and equipment are goldmines for hackers and criminal groups. Those goldmines become all the more accessible when introducing a connected system like a smart hospital. Firstly, traditional medical devices are outdated – they aren't secure by design. This means many wouldn't have been tested for vulnerabilities or built to connect with smart appliances or the internet. (A tough task to foresee the fourth industrial revolution, to be fair.) This gap can allow attackers to gain illegal access to systems and data. A survey by ENISA found the most critical threat to smart hospitals is malicious attacks – like malware blitzes and denial of service (DDoS) raids that take control of systems and devices, steal patient data (most likely to be sold on the dark web) and hold patient data hostage with ransomware. Since the COVID-19 pandemic, attacks on hospitals and health organizations have increased drastically, including this fatality triggered by ransomware in Germany. Human errors still pose one of the biggest threats to patients. Take drug pumps; smart hospitals, or more specifically their workers, deliver controlled doses of medications to patients. These systems prevent over or under-administration, but they have an over-ride button for emergencies. But what if the device isn't configured correctly? Someone could tamper with drug delivery, inadvertently or intentionally, which might have deadly consequences. These technological advancements are not just projects for the IT department: The smart hospital involves participation between technologists and healthcare practitioners. Ongoing collaboration is needed to protect it from cyberthreats to ensure smart systems can save more lives.
iot report 2020

Neat yet slippery: Getting a more secure grip on your Internet of Things

  • min read
    • Now and again, a tool comes along that can be used in so many different ways, to meet so many different goals, that it changes everything. Like the Internet of Things (IoT). Whatever business outcome is challenging you most – health and safety, reducing waste or simply, being more efficient – IoT can help. All sectors are adopting these devices and systems at top speed, for an almost limitless range of reasons. And in this fast-expanding market, research suggests business security practices around IoT have some catching up to do. It's a neat yet slippery name, 'the Internet of Things.' The term defines any device that can connect to the internet, but think less smartphone or laptop, and more the raft of new devices that send or receive data through networks for more precise reasons. While consumers eye fridges that connect to the internet with wry suspicion, they nonetheless sell well. From wearable exercise monitors to virtual assistants, to smart lightbulbs, there's been strong uptake. But in business, IoT has been a bombshell. Using IoT for business is now more common than not. Kaspersky's 2020 report, With superpower comes super responsibility: Benefits and challenges of IoT in business found nearly two-thirds of companies worldwide use IoT. Analyst firms Gartner says there'll be 25 billion global IoT connections by 2025, and IDC (International Data Corporation) and GSMA forecast business spending on IoT will reach $1.1 trillion in the same year, up over 500 percent on 2016. Why has the world gone mad for IoT? IoT can save money, create new revenue streams and optimize processes, to name but a few advantages. Kaspersky's research showed the most common applications in business were things like metering, transportation and heating, venting and air conditioning (HVAC), but their application is almost without limit. Take Singapore. To reduce pollution and congestion, and improve residents' experience of getting around the city, they've recently implemented the IoT-based Green Link Determining (GLIDE) system. It links adjacent traffic signals to allow journeys with minimal stops, detecting vehicles and pedestrians and adjusting traffic signals for them. Or Barcelona, where they're using IoT for smart street lighting, and air quality and noise sensors to make their urban systems data-driven. Meanwhile, in manufacturing, IoT is making it possible to automate more, spot problems before they happen and better maintain equipment. Netherlands' Tata Steel uses IoT sensors across its plant. Analyzing the data has helped the business optimize raw material use, increase yields and reduce waste. IoT has even let loose a whole new industry – 'equipment as a service' – where customers pay by how much they use something, rather than leasing it for a period of time. A whole new world of potential! What's the catch? As with any new technology that expands fast, we see many cases where the gate needs closing after the horse has bolted. The same reasons IoT is changing the business world are why attacks on it are such a risk. The data these devices collect is often personal, commercially sensitive, or both. And as IoT devices are increasingly used for critical systems like traffic, electricity and transport, attacks that aim to stop services working risk public safety. Overcoming the IoT security challenge This high rate of compromise must not go on. What's going wrong, and how can you make sure you get it right when implementing IoT? Minimize the IoT cybersecurity risk by following good processes and asking good questions. Kaspersky's report recommends six areas of action. 1.   Look at security during selection Assess the device and system security before you decide to use it. Give preference to devices with cybersecurity certificates and from makers who are upfront about information security. Look for industry- or use-specific frameworks your business can use to research the device security, such as Industrial Internet Consortium's IoT security maturity model. 2.   Lock the gate Gateways described as 'secure' or 'trusted' sometimes protect only connected devices and not the gateway itself. If the gateway is compromised, cybercriminals can deactivate security, affecting all IoT devices on the network. Use an IoT Secure Gateway solution. 3.   Audit regularly Schedule regular cybersecurity audits and risk assessments on IoT systems. Make sure the team responsible for protecting IoT systems has up-to-date, high-quality threat intelligence. 4.   Update regularly Have a process for getting information on software and application vulnerabilities and making timely updates. 5.   Analyze network traffic Smart devices sometimes use a corporate network to communicate with the data center. Use a cybersecurity solution that analyzes network traffic, and detects and prevents network attacks on IoT. Integrate the analysis into the business's network security system. 6.   Stay in control of your partner and supplier relationships Have an up-to-date list of your partners and suppliers, and the data they can access. Give all partners requirements to follow, including compliance and security practices. Ensure those you no longer work with can't access your data and assets. We all stand to benefit from the efficiency, health and safety, and environmental improvements IoT is already making. If businesses can implement IoT securely, it needn't pose a greater risk of compromise than other technologies. In the coming years, I believe we'll see more and more impressive IoT applications that make a difference not only to the business bottom line but to our daily lives.
5 trends shaping cybersecurity

What’s about to change cybersecurity forever? Five factors to watch.

  • min read
    • In business, you've got to be able to predict the future. But rather than juggling a crystal ball, deduct from what you already know. Leaders should scan the horizon for innovation and think through the consequences for their customers' expectations and lives. And with technological change always comes information security challenges. I've been keeping my eye on a number of developments I believe will change IT security as we know it, in the year ahead. Look into these five innovations and their implications for your business. 1. New data sources will raise new privacy concerns Tech giants just keep seeking more of customers' personal data. At the end of 2019, Google announced plans to acquire health tracking company Fitbit, and a partnership with Ascension, a healthcare records system used in 21 US states. Apple and Amazon have made similar moves toward customer's health data. Other companies of all sizes will take a similar path to track customers' habits and preferences. The sources of customer data will keep getting more diverse. One autonomous car could generate 40 terabytes of data for every eight hours of driving. What does this mean for business? Headline-grabbing examples like these mean activists and broader society will pay ever-closer attention to how data is handled. Expect increasingly stricter government regulation on data use. 2. Cybersecurity will move to a service model Many companies who've handled some cybersecurity in house are now looking to outsource, because it's faster and cheaper, and they get a better overall service. The market for managed services might almost double by 2023. It's a competitive landscape. Service providers will need to distinguish themselves by providing more specific cybersecurity services, where expertise is crucial. According to a recent Kaspersky survey, 74 percent of managed service providers named cybersecurity expertise as a key client need. And for business? Information security vendors must adapt their intelligence and expertise to a service model. Simplify delivery as services rather than products, through managed service providers. 3. Industrial cyberattacks will change cybersecurity expertise Industrial cybersecurity is now moving fast. It's all about letting organizations protect industrial endpoints as they would corporate ones. In 2019, four in five industrial organizations said they were prioritizing managing operational technology (OT) and Industrial Control System (ICS) network cyber risks in the year ahead. This emphasis will help build industrial protection expertise. We need more people who understand vulnerabilities in equipment and the Internet of Things (IoT). More industry and manufacturers will use smart components and entire IoT platforms  to improve efficiency, such as smart meters, predictive maintenance and digital twins. What should business do? The focus should be on identifying vulnerabilities in industrial equipment, and patching them fast. If you're responsible for systems critical to your industry, consider advanced threat detection and response systems, and look for industrial threats expertise. Identify what smart components you're using and make sure they're protected. 4. Machine Learning will need its own cyberattack protection Businesses are using machine learning and artificial intelligence systems more, because they can expand product and service use, from finance and banking, to manufacture and biometric authentication. Their security will be strategically important. They're also popular targets for compromise attempts, including using adversarial techniques meant to spoil machine learning algorithms. For example, bombarding an algorithm with data that may appear clean, but includes deviations too small to detect a bad sample, gradually erasing a once-clear line between clean and harmful files, triggering false positives. What should you do? Protect machine learning-driven systems from compromise with dedicated experts who understand machine learning and adversarial techniques, and can build cyber protection for each case. The same applies to cybersecurity systems that use machine learning for attack detection and response. Review these systems for vulnerability. 5. Businesses will need new ways to innovate Many tech companies innovate by acquiring start-ups. Cloud infrastructure developer VMware acquires start-ups and integrates their technology with existing products. They have a team that looks for innovations that could be useful. This approach demands resources and expertise, and it's only relevant when a company constantly seeks fresh blood. On the other hand, companies that sometimes need highly specialized innovations, but don't have internal resources to search for or nurture start-ups, will look to outsource the search and selection process to a third party with the right expertise. Third parties build a shortlist. You get to choose the best-fit start-up and how you'll interact. What should your business do? Those companies that adopt new technologies first can better attract customers and oust the competition by providing convenient, tailored services and products. But to get the most out of new projects, make sure there are no hidden risks. These five factors should give you a starting place to look in your industry for what could be about to re-shape the cybersecurity you know. There may be further niche trends that matter in your unique field. A business that's always thinking ahead is one that can use that the inevitability of change to its advantage.
industrial cybersecurity training

Industrial cyberattacks are on the rise. Technology and your people can stop them.

  • min read
    • The industrial sector didn't have much cause for cybersecurity before. In the 20th century, there were few computers and little use of the internet in the manufacturing process. The internet of things (IoT) and the rise of operational technologies (OTs) – automated systems responsible for operating machinery safely – has changed all that. With fatal cyberattacks on the rise, it's time to take your cybersecurity seriously and work with your people to help minimize the risks. Digital transformation is transforming cyber-threats As manufacturing plants and sites are becoming more digital, cyber-threats are growing. There's a significant rise in devastating cyberattacks, for example, ransomware like LockerGoga crippling industrial organizations, either by shutting down operations or demanding costly ransoms. The good news? There are simple steps to take, which can limit the chances of it happening to you. Corporate revenge? Hackers for hire? Cyberwarfare? Collateral damage of malware? Motivations and reasons behind industrial cyberattacks vary, but the stakes are sky-high for plants and businesses. If industrial OT systems are hacked and large machinery is compromised, there could be fatalities. Triton: Why industrial cyberattacks could cost lives Let's explore a previous industrial cyberattack. Triton is malicious software (malware) used to target Triconex, a Safety Instrumented System (SIS) – sensors and software to reduce safety risks in industrial settings – used in power stations and petrochemical plants. In 2017, hackers attacked a Saudi Arabian petrochemical plant with Triton. But, luckily (and somewhat ironically), a bug in the malware halted the attack in its tracks. The hackers' intentions were unknown, but the infiltration of the system could have put the plant and its workers in jeopardy. Could it have been stopped otherwise? Yes, but only with the right cybersecurity measures. There's a significant challenge here: IT security is new to industrial workplaces, and it's only been a requirement in the last decade; in some cases, it's non-existent. Plus, many IT teams and engineering squads don't have the training to work effectively together to spot a threat that's unfolding in real-time. OT engineers may be unaware of how to detect the signs of an attack and look for other faults like machinery, human error or asset misconfiguration. Want to protect your business? Update your security systems and start training your workforce. How to minimize the chances of a cyberattack Let's explore how to defend operational technologies (OT) that operate machines and make them easier to manage and monitor plant safety, among other things. To start, you need an industrial endpoint security product – software that can help you protect all your devices and network from hackers. This is crucial. Once you have this, you need to use all the endpoint features effectively (this is called system hardening) to make it harder for hackers to get into your network. Also, use an OT network security monitoring solution (this is usually hardware) to detect the signs of attack on controllers and other equipment. Why training employees to be cyber-aware is crucial for defending your business Kaspersky reported 52 percent of enterprise breaches happen after employees' inappropriate IT use. With lives at stake, when it comes to cybersecurity, your employees need to know not just what to stay away from but how to keep secure. Here's how. Train everyone in cybersecurity It's not just IT teams that need cybersecurity training; everyone from engineers to finance managers need it. But, that said, your primary focus should be with your IT and IT security teams. OTs are typically not in their remit. They need time to learn how to secure them and work alongside operational engineers. Everyone is responsible for preventing an attack. Book in time to train everyone. Differentiate the training for IT, engineers and operations. Engineer, operations and other groups need theoretical teaching and practical exercises but pitched to their level of expertise. For IT security teams, exercises should include red and blue teaming. Red teams try to attack your organization while the blue teams defend it. This is an attack simulation using real-world cyberattack scenarios and case studies, like the 2015 attack on a Ukrainian power grid. Here, hackers orchestrated a spear-phishing attack to gain access to the operating system, then disabled power across the affected regions for between one and six hours. It's a practical way to assess the capabilities of your cybersecurity team. Lockdown activities on corporate devices Engineers or other personnel may use work devices outside the plant, like when traveling to meetings or other sites. They will most likely use corporate devices for personal use. By browsing social media on a work laptop, employees are exposed to different materials that could be malicious. Using USB sticks from outside your organization can carry a significant risk of bringing malware into your network. Explain the importance of using work devices only for work and not personal use. Retrain and refresh Retraining is critical, especially as your organization continues its digital transformation. People forget things, especially if it's not a day-to-day task. To keep protected, your education efforts must be consistent, not just one-off. The future of industrial cybersecurity As the industrial sector evolves, technology like the internet of things (IoT) will become more critical to the success of the industry. Industrial IOT and smart sensors could enable anything from control systems automation to predictive maintenance. As the industrial sector becomes more connected, it will benefit society and improve business productivity. But, like any technological shift, cyber-threats will evolve with it. By taking measures to secure your technologies and educate your employees, you minimize the chances of falling foul of a cyberattack, saving money and lives.
by Innovating leaders.
Innovative tech.
About Secure Futures

Secure Futures magazine is your go-to business guide for opinions, trends and insight into the world of technology and cybersecurity. We help your business to bring on the future. Brought to you by Kaspersky, the global cybersecurity experts.

  • For all other countries