Industrial cyber security improving, but needs work

The number and level of sophistication of cyber attacks in the industrial space is increasing, but there is a reciprocal increase in defence capability, according to Jeff Zindel, vice-president and general manager of Honeywell Industrial Cyber Security.

“The good news is that we are also seeing a dramatic increase in attention and focus on improving their cyber security posture and recognition for the need for cyber security across industrial operations,” he told Computer Weekly.

This is evidenced, said Zindel, by the fact that organisations are moving away from assessments and audits to implementing cyber security controls and mitigation capabilities.

“There is also growing use of Managed security services to complement their on-site capability and provide secure file transfers and software updates, as well as continuous monitoring,” he said.

However, he said that although there is a high level of awareness of the need for good cyber security in industrial operations, in many cases cyber security fundamentals are not yet in place.

A recent Honeywell-sponsored survey by LNS Research of 130 decision makers from industrial companies revealed that only 37% were monitoring their plant systems for suspicious behaviour and 20% are not conducting regular risk assessments.

“The survey also found that 53% said they had already experienced cyber security breach, but that is not surprising, given how young we are globally in cyber protection for critical infrastructure and industrial cyber security,” said Zindel.

“So while many organisations are embracing it, we are still in the relatively early stages, and still have some way to go,” he added.

To help organisations respond to the industrial cyber security threat, Zindel said Honeywell has a network of global cyber security centres of excellence (COEs) dedicated to improving industrial cyber security for critical infrastructure, information technology (IT) and operational technology (OT) convergence, and digital transformation, with the latest COE opening in Dubai.

The newly launched COE, at Honeywell’s Middle East headquarters, is aimed at strengthening regional cyber security preparedness for industrial and critical infrastructure. The centre contains distributed control systems, a physical plant process and the latest industrial cyber security software and systems.

The centre also includes data analytics and networking equipment, and is led by a full-time operations team with deep industrial cyber security expertise and operational technology knowledge.

Built on experience from other COEs, Zindel said the centre in Dubai adds another level of training by providing a self-contained “tank room” for advanced cyber security training through attack simulations, with red and blue teams in an isolated industrial control system (ICS) and industrial environment network.

“This COE is the first of its kind in the Middle East dedicated to developing world-class industrial cyber security expertise for our customers in the region, enabling us to test security technologies and demonstrate process control network vulnerabilities and threats, train customers with real-time attack simulations, and provide advanced customer education and consultations,” he said.