Network Segmentation to Enhance OT Cybersecurity

A number of studies have found that untrained employees are the biggest threat to an organization’s network security. A study[1] by ESI ThoughtLab found that 87% of executives are aware of this fact. Consequently, companies of all industries and sizes are now putting more focus on preventing (or minimizing) attacks by investing in training for employees using Operational Technology (OT) systems including Industrial Control Systems.

Common Pitfalls

• Operators accidentally click on a link in a phishing email from an operator station
• Poor credential management: Allowing unrestricted access to system areas or functions that are not needed for an operator’s job role
• Incident preparedness: No incident response program. What if something did happen? Is there a well-prepared plan in place?
• User’s credentials are not removed from system when leaving the company.

Mitigation through Cybersecurity

Even trained employees are human. The good news is many weak links can be prevented by improving the security of your ICS network.

Champion’s Certified Cybersecurity Experts are trained in the latest ISA/IEC 62443 and NIST standards for Industrial Cybersecurity. This means you benefit from the most current, comprehensive safeguards for your operations.

Industrial Cybersecurity is an ongoing cycle of assessing vulnerabilities, implementing solutions, and maintaining secure operations without production downtime.

Champion can help you by providing Vulnerability & Risk Assessments of your current network, then offer System Hardening and Configuration to mitigate risks. We can also help you in developing Cybersecurity Policies and Procedures, implementing best practices, and recovery steps for incident response in the event of an attack. We can even host a complete backup of your control system to get you up and running with little or no downtime, should a major disaster strike.

Lastly, as your Cybersecurity Experts, Champion can maintain a secure live Intrusion Detection & System Recovery Systems, Investigate Incidents, and provide a comprehensive incident response plan that fits your needs.

Contact us today to schedule a no-cost consultation.

[1] Source: https://www.controleng.com/articles/untrained-staff-is-the-biggest-cyber-risk-according-to-report/

[2] Source: https://www.exida.com/Blog/cyberattacks-succeed-where-humans-and-systems-are-weak