Blog

Cynalytica is now extending and integrating the power of the SerialGuard® AnalytICS Platform for Industrial IoT/OT customers with Splunk®. This new partnership means that Splunk® users can now easily and securely capture real-time serial data from the lowest layers of the ICS network via the SerialGuard® AnalytICS Platform and leverage Splunk’s world-class AI and machine learning capabilities to gain automated contextual threat detection, actionable operational insights, and unified threat intelligence across their OT and IT networks.

To mark Cybersecurity Awareness Month, we decided to tackle some of the most common myths in the ICS cybersecurity realm, while paying particular attention to legacy systems. Here are ten myths that we regularly come across.

Why system integrators need to fully embed Industrial Control Systems (ICS) cybersecurity capabilities into client delivered systems.

Historically, Industrial Control Systems (ICS) could exist as a closed-loop, with an air-gapped network and a solid physical security program insulating them from the outside world. An operator could trust the integrity of their operations based on process outputs, and when processes broke down maintenance was brought in to locate and fix the issue.

In the past decade, we have seen an alarming increase in attacks on critical energy infrastructure, with cyber incidents occurring across any number of geographies and industries. Common attacks can involve ransomware on a corporation’s Information Technology (IT) network that controls business operations, or a direct attack on a corporation’s Operational Technology (OT) systems that control industrial infrastructure.

If carried out as described, the actions proposed in the American Jobs Plan will help to bolster the cybersecurity posture of American critical infrastructure, however they do not go far enough to address the vast scale and scope of the problem we are facing.

As far as legacy Industrial Control Systems (ICS) are concerned, level 0/1 serial communications monitoring isn’t just about network security; it’s also about utilizing the data as a “first step” to digital transformation.

To anyone working in cybersecurity, it is not news that just about every critical infrastructure industry is significantly behind on their path toward cybersecurity maturity. There continues to be a fundamental friction between the estimation of cyber risk and the short-term thinking of today’s quarterly budgetary decisions.

There are several considerable roadblocks to safe and secure digital transformations efforts in manufacturing, or any industrial application where safety, security and reliability are paramount. At a high-level these areas include: Cybersecurity, Data Integration, and IT/OT interoperability and Integration.