Cybersecurity Challenges in Energy and Manufacturing Sectors: A Brewing Storm

Strategic Insights -

The energy and manufacturing sectors are grappling with increasing cyber threats as the demand for energy surges driven by artificial intelligence (AI). These industries are racing to secure their operational technology (OT) environments, which are often outdated and resource-constrained. A survey conducted by Siemens Energy and the Ponemon Institute reveals the alarming state of OT cybersecurity in these sectors, with frequent cyber threats, common vulnerabilities, and scarce cybersecurity expertise driving investment towards technology-based solutions and outsourcing.

Key Takeaways:

  • 77% of companies reported a successful cyberattack compromised confidential data or caused disruptions to OT in the previous 12 months.
  • 62% of successful attacks took more than one month to discover, and the average recovery time was seven months.
  • 24% of detected attacks required halts to OT workflows.
  • 50% of companies rated their own defences poorly and could prevent little more than accidental or unintentional misuse.
  • Majorities reported that their OT networks were not properly segmented and used devices or software with known vulnerabilities.
  • 52% stated that they believed their companies were likely or very likely to suffer a successful attack on OT in the upcoming year.
  • 46% said a successful attack is likely or very likely to cause a plant shutdown.
  • The actual number of cyberattacks is about 10 times higher than what is being reported to regulators.
  • Only 16% of detected attacks required reports to regulators, implying that 84% of attacks were either undetected or below the reporting threshold.

Statistics:

  • 41% of all attacks in the OT environment go undetected.
  • 16% of detected attacks required reports to regulators.
  • The actual number of cyberattacks is approximately 10 times higher than reported to regulators.

Sources:

  • Siemens Energy and the Ponemon Institute (exact title and publication date not provided) report on OT cybersecurity in the energy and manufacturing sectors