Bureau Veritas Greater China’s Post

In the face of rising threats, utilities must prioritize robust cybersecurity measures to safeguard their critical infrastructure. In this Sendero blog, discover the importance of adopting a comprehensive security strategy that includes regular risk assessments, layered defenses, and ample employee training. Click the link to read more.

Facing growing cyber threats, the oil and gas industry is evolving its response, building greater resilience against attacks. DNV's "Cyber Priority" research reveals a shift in mindset to the vulnerabilities lying in its critical infrastructure: - 62% of professionals reporting increased cybersecurity investments in 2023, recognizing the urgency of securing both IT and operational technology (OT) systems.  - 91% see cybersecurity as essential for digital transformation, the industry's engine for cost reduction, efficiency, and decarbonization.  - 75% prioritize cybersecurity on par with physical safety, reflecting growing awareness of the cyber threat. - The industry needs to bridge the gap between C-suite awareness and frontline implementation, similar to the safety culture shift after major incidents like Piper Alpha More on the topic https://lnkd.in/dgf2xBh3 #Cybersecurity #OilAndGas #DigitalTransformation

Where is your company on their ICS/OT cybersecurity journey? As we all know, the mission for ICS/OT cybersecurity is different from IT. This means that your focus needs to be on availability. However, your ability to patch and protect the ICS/OT environment is limited to when there is a shut or maintenance window. The threats to the ICS/OT environment are not limited. So how do you manage this challenge? You have to address the traditional aspects of cybersecurity including your perimeter between Level 4 and Level 3 of the Purdue model, manage remote access to the ICS/OT, understand the ingress and egress risks, and patch the ICS/OT systems... Since the focus is on availability, you need to think about resilience as a key factor. Traditional backup and recovery are slow at best, and traditional failover solutions are costly. Check out the www.fortresslabs.com solution for their secure failover enclave. By combining cyber resilience with failover they address availability and allow companies to protect their revenue critical ICS/OT systems at the same time. #cybersecurity #otcybersecurity #resilience #availability #PurdueModel #iec62443 #isa95

Super exciting to see this happening today! Strategy Guide: https://lnkd.in/dK5JE48K The SANS Strategy Guide: ICS Is the Business emphasizes the critical importance of securing Industrial Control Systems (ICS) and Operational Technology (OT) environments in 2024, highlighting how these systems are integral to business operations and overall organizational security. The guide outlines best practices for protecting ICS/OT assets from evolving cyber threats and underscores the need for a proactive, business-aligned approach to cybersecurity in these environments. Webcast: https://lnkd.in/d9bdZ5Ce SANS ICS Security experts Robert M. Lee, Tim Conway, Jason Christopher and Dean Parsons will present on the urgent need for businesses to prioritize ICS security to prevent disruptions, financial losses, and potential safety hazards. They’ll provide insights into the current threat landscape and offer actionable guidance on how organizations can strengthen their ICS security posture to protect critical infrastructure. Lauren Ashy Tim Conway Robert M. Lee

🗣 "As critical infrastructure embraces #InternetOfThings, #CloudComputing & #ArtificialIntelligence, there is an exponential increase in the #Cyber threat from multiple directions." 💻🛑 ✅ Stay ahead of the game and find out how integrating #HumanFactors in #CyberSecurity can safeguard critical infrastructure in the #rail industry 🚆 with our resident expert Eylem Thron, PhD 👉 https://lnkd.in/dCiHdsKi #DesignThatConnectsUs #HumanCentredDesign #railwaytechnology #railindustry #rail #HumanFactorsEngineering #passengerexperience #safety #AccidentPrevention

Excited to share this insightful blog from Eylem Thron, PhD on the importance of integrating human factors into cybersecurity strategies for safeguarding critical infrastructure. As technology evolves, so do the threats, making it crucial to consider the human element in our defence systems. This blog delves into practical approaches and strategies to ensure a robust cyber defence posture. A must-read for anyone involved in human factors, cybersecurity or responsible for protecting critical assets. #Cybersecurity #digitalinfrastructure #HumanFactors

We see more and more guidelines for specific sectors such as water. Water is part of National Critical Infrastructure (NCI). There have been a few public cyber incidents with physical consequences (production downtime) and we also see that in some countries water companies have been forced by the regulator to go into full isolation mode. But why stay in full isolation ("islanding") mode if you can bring all of your operational and OT data in a 100% secure and native way into your corporate network for Business Reporting, Optimizing your Process, Predictive Maintenance or share with your ecosystem of suppliers? Unidirectional Security Gateways are used more and more in Drinking and Waste water, but still are unknown to many people. Engineering Grade (physical) solutions have the advantage that they CANNOT be breached and are your way to get out of an Air-Gapped network and reap the benefits of your operational data WITHOUT having a risk for outside sophisticated attacks by e.g. nation states. GO UNIDIRECTIONAL AND STAY AHEAD OF THE THREAT!

In this blog, Chad Elmendorf discusses the continuous hardening of Industrial Control Systems (ICS). Continuous hardening is a proactive strategy to ensure the security and resilience of industrial systems against evolving threats and vulnerabilities. This approach involves implementing, maintaining, and regularly updating security measures to protect ICS from cyberattacks, physical threats, and operational disruptions. #ContinuousHardening https://lnkd.in/gZbeq2Q9

The recent global outage underscored the crucial need for #systemresilience in our interconnected world. While many felt the pain from the outage in transportation, healthcare, and financial industries, many didn't realize that #automotive was also impacted. VicOne has prioritized our rigorous testing, secure patch management, and rapid incident response to safeguard your systems. Our robust processes and adherence to international #cybersecurity standards ensure stability and adaptability. We want to partner with you and share our approach to help you stay resilient in the face of unexpected challenges. Read more: 🔗 https://lnkd.in/ehDsqeXY We're getting ahead of things so you don't have to. Together, we can avoid another outage. #TechInnovation #CyberAware #ITSecurity

As more and more operational technology (OT) platforms converge with information technology (IT), evolving threats such as website intrusion, malicious code, distributed denial-of-service (DDoS) attacks, unauthorized network scanning or probing, malware, ransomware, phishing, data breaches, etc. A recent survey indicates the continued growth of #zerotrust to protect IT & OT environments. #ITOT #Industrialsecurity #zerotrustarchitecture #cybergaps #manufacturing #utilities