Increase in connected devices is raising the stakes for security

27 April 2021

Research from Tripwire Inc, a provider of security and compliance solutions for enterprises and industrial organisations, assessed the security of connected devices across enterprise environments in 2021.

The survey evaluated the opinions of 312 security professionals that manage the security of internet of things (IoT) and industrial internet of things (IIoT) devices across their organisation.

According to the survey, 99% of security professionals reported challenges with the security of their IoT and IIoT devices, and 95% are concerned about risks associated with these connected devices.

More than three-quarters of those surveyed said that connected devices do not easily fit into their existing security approach, and 88% required (or still require) additional resources to meet their IoT and IIoT security needs. This is of particular concern for those in the industrial space, as 53% said they are unable to fully monitor connected systems entering their controlled environment, and 61% have limited visibility into changes in security vendors within their supply chain.

“The industrial sector is facing a new set of challenges when it comes to securing a converged IT-OT environment,” said Tim Erlin, vice president of product management and strategy at Tripwire. “In the past, cybersecurity was focused on IT assets like servers and workstations, but the increased connectivity of systems requires that industrial security professionals expand their understanding of what’s in their environment. You can’t protect what you don’t know.”

The survey also examined practices and ongoing concerns of security professionals responsible for maintaining a connected environment. Of those surveyed 88% said they follow some kind of security standard or framework, and most are audited against the framework. Despite this, industrial professionals across manufacturing, energy, farm & agriculture, pharmaceutical, chemical, nuclear, waste & water and oil & gas industries believe they would benefit from expanded ICS security standards and 97% have concerns about supply chain security, with 87% agreeing that existing IoT and IIoT security guidelines put their supply chain security at risk.

“It’s understandable that managing supply chain risk is top of mind for industrial security teams given the level of attack we have seen this year. Large-scale supply chain risk isn't new, so if anything, this should encourage companies to invest in resources that help maintain a more secure environment,” continued Erlin.

The survey did find that some organisations are already heading in the right direction. In light of recent events, 59% report that their budget for managing supply chain security increased in the past year. In addition, 99% report that their security teams are already in the habit of refusing employee requests to connect devices; 43% say they often do, which indicates work is already being done to maintain a smaller, connected footprint and manage inventory across the network.

For more findings on Tripwire’s survey visit: https://www.tripwire.com/misc/iot-and-iiot-cybersecurity-report


Print this page | E-mail this page