Cyber Defense eMagazine May Edition for 2022

understand the control system processes, the engineering, industrial protocols, safety factors,
and ICS-specific cyber threats and maintain response plans that fit their organization.
• Employ an active cyber defense cycle (ACDC) whereby they can secure, maintain, monitor for
and respond to threats. This repeatable process is driven by human cyber defenders who have
both the necessary engineering knowledge of the OT environment and a background in
cybersecurity defense. An active defense keeps security personnel engaged in identifying
vulnerabilities and takes a more proactive than reactive approach with the focus on understanding
not just the last attack but looking ahead to the next one.
• Bring in a third-party organization to aid in identifying vulnerabilities, setting up a robust security
program, and advising on maintaining OT protection moving forward. These experts can provide
support for companies as they make key hires and set up an in-house cybersecurity program.
Cybersecurity now or forever hold your peace
OT environments are still playing catch up in terms of cybersecurity as 45% of survey participants
estimate threats to their control systems are at high risk. And they’re right. The effect on operations,
human safety and the environment could all prove costly when OT systems are exploited.
Many companies are not prepared for the potential onslaught of attacks that could be headed their way.
While many are coming around to the necessities of building a more robust cybersecurity program for
their OT environments, they are fighting an uphill battle to prepare for these attacks. Threat actors are
actively plotting their next OT/ICS attack, looking to disrupt critical infrastructure either for profit or political
gain. Without a proper plan for how to identify, respond to and recover from an attack before the attack
occurs, organizations could find themselves in costly and dangerous situations.
About the Author
Ian Bramson is Global Head of Industrial Cybersecurity at ABS
Group and a recognized leader in the emerging threat landscape
of attacks on industrial operations and critical infrastructure. With
more than 20 years of experience in cybersecurity and technology,
Ian works directly with executives in the energy, industrial and
maritime sectors to help minimize their cybersecurity risks. Ian can
be reached online through his LinkedIn page at
https://www.linkedin.com/in/ianbramson/ and at our company
website https://www.abs-group.com/
Cyber Defense eMagazine – May 2022 Edition 24
Copyright © 2022, Cyber Defense Magazine. All rights reserved worldwide.