Digitization and the Industrial Internet of Things (IIoT) are accelerating the need for cybersecurity within Industrial Automation and Control System (IACS) environments. The increased complexity and growing adoption of IIoT means that cybersecurity must be designed into all of the components present in the IACS environment. But before we start blindly playing whack-a-mole with IACS environment cybersecurity, we need to appreciate that this message has been delivered for many years now. So why are so many asset owners and operators still unclear on how to improve cybersecurity? Often it comes down to the lack of a well-defined IACS Cybersecurity Program strategy. This in turn makes the effective application of administrative, technical, and physical security controls, processes, and procedures even more difficult and less effective. In our experience, many organizations still lack relevant cybersecurity talent that can help determine vulnerability levels and possible impacts of threats to the IACS environment.
The goal of this presentation is to continue increasing the awareness for cybersecurity needs within the IACS environment (the sky is not falling but…), highlight some of the most common findings that are seen by Cybersecurity Service teams, and explain key considerations that organizations should look for when selecting an external Cybersecurity Services team to help build an effective IACS Cybersecurity Program.
Sponsored by: Schneider Electric
