Transforming Industrial Cyber Security for a Global Manufacturer

Executive Summary:

Global manufacturer faced a complex challenge in implementing, securing and supporting their evolving industrial control system (ICS) network to meet critical milestones within their Industry 4.0 framework with strict cybersecurity requirements outlined by NIST.

Challenge:

This resulted in several critical issues:

• The need to introduce secure network architecture standards for process systems raises the security posture level and addresses compliance.
• Fragmented program management across IT, OT, data cabling, and power, hindering successful transition.
• Incorrect device placement, increasing the attack surfaces and making it difficult to monitor network activity.
• Missing pre-purchase screening processes exposed them to potential security risks with new equipment.
• Limited Industrial network visibility made it hard to detect suspicious activity or identify new devices.
• Unable to scan for vulnerabilities or changes meant potential security breaches could go unnoticed.

Solution:

IDS-INDATA co-developed a multi-pronged approach to address critical industrial networking, cybersecurity and operational outcomes:

• Industrial Network Assessment: A comprehensive assessment of the existing network infrastructure, identified devices and networks currently in place, potential risks and gaps in security, and areas for improvement and transition to the desired future state.
• Secure Network Design and Deployment: Our teams forged a close working partnership between the customer and vendors, translating industry-proven best practices into the design of a robust industrial network architecture compliant with NIST standards that scales.
• Pre-purchase Security Review: A process was established to vet new equipment for potential security risks before integration into the network.
• Managed Service: Ongoing monitoring and management of network and security infrastructure to include incident, change and patch management.

Key Performance Indicators (KPIs)

The success of the implemented solution was measured using the following KPIs:

• Incident Resolution Time: Track the average time taken to resolve incidents, aiming for a significant reduction in the Meantime to Repair (MTTR) or loss of production.
• Network Changes: Monitor network changes’ types, technologies, and locations to ensure they are secure and authorised.
• Transition to Future state: Understanding and reporting on the progress made across multiple countries and sites affecting future initiatives and projects and tracking against projected return.

Next Steps:

This case study outlines the initial phase of a comprehensive industrial networking and security program. Ongoing collaboration will focus on:

• Continuous Improvement: Refining security policies and procedures based on evolving threats and best practices.
• Security Integration with Business Processes: Embedding cybersecurity considerations into day-to-day operations for a holistic approach.
• Advanced Threat Detection and Response: Implementing advanced security tools and techniques to stay ahead of emerging threats.