{"id":26718,"date":"2019-06-17T09:55:17","date_gmt":"2019-06-17T08:55:17","guid":{"rendered":"https:\/\/www.intelligentcio.com\/africa\/?p=26718"},"modified":"2019-06-28T09:59:13","modified_gmt":"2019-06-28T08:59:13","slug":"cybersecurity-risk-is-at-critical-level-according-to-sans-survey","status":"publish","type":"post","link":"https:\/\/www.intelligentcio.com\/africa\/2019\/06\/17\/cybersecurity-risk-is-at-critical-level-according-to-sans-survey\/","title":{"rendered":"Cybersecurity risk is at critical level, according to SANS survey"},"content":{"rendered":"

People remain the greatest threat to industrial control systems (ICS) and associated networks, according to a new SANS survey focused on better understanding cybersecurity risks to operational technology (OT) systems. More than half of respondents also see the cyber risks to their safe and reliable operations as high or higher than in past years.<\/p>\n

A total of 348 security professionals worldwide, representing IT, OT and hybrid IT-OT domains provided their thoughts in the SANS 2019 State of O7\/ICS Cybersecurity Survey<\/em>.<\/p>\n

Sixty-two percent of those surveyed believe people are the greatest risk to cybersecurity compromise, trailed by technology (22%) and processes and procedures (14%).<\/p>\n

\u201cThe obvious concern about the risk that people represent – whether they are malicious insiders, careless employees or nation-state bad actors – is consistent across industries,\u201d said Barbara Filkins, SANS Senior Analyst.<\/p>\n

\u201cWe were a little surprised at the lower-ranking concern around process, given that there is significant complexity involved in ICS design, implementation and operation to safeguard OT systems. It\u2019s possible recent attacks that almost always include tried-and-true tactics that exploit human-factors might have impacted our respondents\u2019 perceptions.”<\/p>\n

\"\"<\/p>\n

Survey takers told SANS that identifying connected assets and gaining visibility into device, network and control system integrity remains an issue – 45.5% consider it a leading focus for their organisations. That aligns with traditional IT security concerns in which identifying, and tracking assets and networks, remains a challenge. Not surprisingly, mobile devices (including those used remotely to augment and replace ICS workstations), and wireless communications solutions are contributors to overall risks and threat exposure.<\/p>\n

\u201cWe know from previous SANS research that the addition of \u2018things\u2019 and mobile devices to ICS represents significant risk,\u201d said Doug Wylie, Director of SANS Industrials & Infrastructure Business Portfolio.<\/p>\n

\u201cWe see in our newest results that practitioners struggle mightily with how to offset these mounting challenges.\u201d<\/p>\n

The growing adoption and movement to cloud services (40% of respondents indicated they use some cloud service) represents additional risks with exposure to new threats that need to be comprehended and addressed.<\/p>\n

Wylie added: \u201cHyperconnectivity and the rapid introduction of new technology within OT, is providing tangible value, but the added complexity that comes with each continues to outpace the readiness of those tasked with safeguarding today\u2019s systems from cyber threats.\u201d<\/p>\n","protected":false},"excerpt":{"rendered":"

People remain the greatest threat to industrial control systems (ICS) and associated networks, according to a new SANS survey focused on better understanding cybersecurity risks to operational technology (OT) systems. More than half of respondents also see the cyber risks to their safe and reliable operations as high or higher than in past years. A […]<\/p>\n","protected":false},"author":25,"featured_media":26719,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[4950,5,821,275,399,19,54,262],"tags":[9920,388,9921,9922,485,1885,9352,9353,1671],"class_list":["post-26718","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-analysis","category-enterprise-security","category-infographics","category-intelligent-technology-newsletter","category-more-news","category-regional-news","category-research","category-used","tag-barbara-filkins","tag-cybersecurity","tag-doug-wylie","tag-hyperconnectivity","tag-ics","tag-industrial-control-systems","tag-operational-technology","tag-ot","tag-sans"],"acf":[],"publishpress_future_workflow_manual_trigger":{"enabledWorkflows":[]},"_links":{"self":[{"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/posts\/26718","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/users\/25"}],"replies":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/comments?post=26718"}],"version-history":[{"count":2,"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/posts\/26718\/revisions"}],"predecessor-version":[{"id":26722,"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/posts\/26718\/revisions\/26722"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/media\/26719"}],"wp:attachment":[{"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/media?parent=26718"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/categories?post=26718"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/tags?post=26718"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}