Edge Security: Protecting Remote Assets with Industrial Cyber – ARC Industry Forum Update

Scott: “It’s an interesting dynamic.

There’s a heavy investment in cybersecurity on the IT side of the house, where a lot of the cost center is…but we don’t seem to focus as much on protecting the assets that generate our revenue. We’re seeing people starting to realize that.

There’s been a transition to develop maturity onto the OT side of the house. A few years ago, OT wasn’t even coined as a phrase.”

Scott: “Cybersecurity is moving away from being an disabler, where we say, ‘I don’t allow you to do things,’ to enabling you to do it in a risk-averse way.

A lot of the things we’re doing is allowing them to get the analytics they need, the data they need, the valuable efficiencies, but doing it in a secure way.

Making sure we’re transmitting data in the right way and enabling the digital transformation that our companies are going through.”

Scott: “We’re seeing ransomware affect both sides of the house. It’s no longer an OT problem or an IT problem. It’s across the board, and it doesn’t care what it’s encrypting; it just wants to encrypt everything.

We’re also starting to see a lot more of unintentional, internal threat actors. People not following best practices about shared passwords, Post-It notes with passwords on the console, and things like that.

One of the first things we do during a risk assessment is look for passwords on white boards and sticky notes. It’s the most common way exposures happen.”