2017 was a wake-up call for the manufacturing sector in regard to cybersecurity. First, for the first time, major manufacturing companies had major losses due to cyberattacks. Either as a direct target or as cyber “collateral damage”, household name manufacturers across the US and Europe lost hundreds of millions of dollars through cyber attacks. Second, the deadline for full compliance with NIST 800-171 was December 31, 2017. For some manufacturers, this was the first time that they seriously looked at their cybersecurity posture.
The manufacturing sector has some particular challenges which make the traditional approach to cybersecurity difficult. There is a dependence on operational technology which make them harder to assess, there are individual products and services that are integrated into the manufacturing process that in themselves may have poor security, the use of IoT devices is growing and the list goes on!
CS360 can help you:
- Understand your current risk posture as compared to leading practices and compliance requirements
- Reconcile current controls with your appetite for risk
- Document existing controls and security efforts
- Identify and quantify risks to your information assets
- Understand the strengths and weaknesses of your current defenses
- Examine weaknesses from the perspective of the attacker
- Align your IT risk management programs with your security and business goals
- Identify areas of operation where the risk to your organization may be too high