Most Industrial Cyber Incidents Down To Human Error – Kaspersky
.jpg)
Cyber security incidents in industrial systems are mostly down to employee error, Kaspersky has warned in a new report.
The report, “State of Industrial Cybersecurity 2019”, found that employee errors or unintentional actions were behind 52% of incidents affecting operational technology and industrial control system (OT/ICS) networks in 2018.
Last month a number of large blue-chip industrial firms in Germany confirmed they have been subjected to cyber-attack. BASF and Henkel are chemical giants, Siemens makes power-generating kit among other things, and Roche is a drug company.
Industrial cyber incidents
Part of the problem for industrial entities is the shortage of professionals to handle modern cyber risks, coupled with low awareness among employees.
The problem is getting worse as more industrial groups change from manual processes to computer systems, some of which can be highly complex.
In March, for example, large Norwegian manufacturing firm Norsk Hydro admitted it had lost more than $40m, in the week following a devastating ransomware attack.
The Kaspersky report confirmed that industrial groups are increasingly recognising the importance of securing their systems, with 87 per cent of respondents agreeing that cybersecurity is becoming a top priority for industrial companies.
A fine sentiment, but the Kaspersky study also found that only just over half of companies (57 per cent) have the allocated budget for industrial cybersecurity.
Matters are not helped by a shortage of skilled staff.
“Organisations are not only experiencing a lack of cybersecurity experts with the right skills to manage protection for industrial networks but are worried that their OT/ICS network operators are not fully aware of the behaviour that can cause cybersecurity breaches,” the security experts said.
“These challenges make up the top two major concerns relating to cybersecurity management and go some way to explaining why employee errors cause half of all ICS incidents – such as malware infections – and also more serious targeted attacks,” it added.
Kaspersky said that in almost half of companies (45 per cent), the employees responsible for IT infrastructure security also oversee the security of OT/ ICS networks. It said this approach may carry security risks: although operational and corporate networks are becoming increasingly connected, specialists on each side can have different approaches (37 per cent) and goals (18 per cent) when it comes to cybersecurity.
“This year’s study shows that companies are seeking to improve protection for industrial networks,” said Georgy Shebuldaev, brand manager at Kaspersky Industrial Cybersecurity.
“However, this can only be achieved if they address the risks related to the lack of qualified staff and employee errors,” Shebuldaev added. “Taking a comprehensive, multi-layered approach – which combines technical protection with regular training of IT security specialists and industrial network operators – will ensure networks remain protected from threats and skills stay up to date.”
IoT protection
Kaspersky also warns organisations to consider specific protection for Industrial IoT which can become highly connected externally.
In April this year security officials at the German multinational pharmaceutical and life sciences giant Bayer AG reported that they detected and then contained a cyber attack.
The hackers using the Winnti malware had apparently gained access to Bayer’s network in early 2018 by using malware to spy on the company.
But security teams at Bayer reportedly detected the intrusion and covertly monitored it for over a year.
source silicon
Industry: Cyber Security
Latest Jobs
-
- Senior Client Microsoft Security Delivery Consultant - Hybrid (London | Remote)
- London
- N/A
-
Senior Client Microsoft Security Delivery Consultant - Hybrid (London | Remote) We are seeking an experienced technical Security Consultant to help clients deploy and enhance their cyber defences across Microsoft and vulnerability management technologies. You will work with enterprise customers to deliver tailored solutions across threat detection, endpoint protection and exposure management, ensuring security platforms are efficient, integrated and aligned with operational goals. Whilst you won't do the design yourself- you will work alongside technical Presales to document, agree and then deliver the solution. You will have experience leading delivery the implementation and improvement projects, providing hands-on support with configuration, integration and optimisation. You will assess existing environments, recommend enhancements and guide clients on best practice to strengthen visibility and control. Strong experience with SIEM, XDR and vulnerability tooling (Microsoft & Tenable ecosystems ideal) Understanding of Azure security, identity and access controls Background in consulting or project-based cyber delivery Clear communication skills with the ability to engage senior stakeholders Extra points if you have the SC-100. You must be eligible to achieve UK Security Clearance to be considered for this role.
-
- Account Director | Cyber Security Consulting | UK - South East
- London
- N/A
-
Account Director | Cyber Security Consulting - Financial Services | UK - South East. New Role due to Growth We are looking for an experienced Account Director to develop and expand existing relationships across the financial services sector, working with investment firms, asset managers, private equity groups and strategic partners to deliver intelligent cyber consulting and a bespoke Cyber product offerings. You will act as a trusted advisor, helping organisations strengthen digital resilience, manage third-party and regulatory risk and adopt a proactive approach to cyber assurance. Key Responsibilities Manage a defined portfolio of financial clients, understanding business priorities and aligning tailored cyber solutions. Drive new client engagement while nurturing existing partnerships through a consultative, long-term approach. Present the benefits of advanced cyber services including threat intelligence, vulnerability management, incident readiness, and continuous risk monitoring. Collaborate with technical and delivery teams to ensure smooth engagement from proposal through to implementation and ongoing support. Prepare proposals, negotiate commercial terms, and clearly articulate value and business outcomes. Build trusted relationships at senior and board level. Ideal Profile Strong background in cybersecurity, consulting, or risk management within financial services. Skilled communicator with proven success managing and growing key accounts. Able to translate complex technical insight into commercial and strategic value for clients. Confident engaging with senior stakeholders and decision makers. Please note: Sponsorship is not available.