Towards Industrial Cybersecurity Resilience of Multinational Corporations
Michael James Lees, Melissa R. Crawford, Christoph Jansen · IFAC-PapersOnLine · 2018
The digital domain, or cyberspace, has developed into the fifth domain for military operations, along with air, sea, land and space. Malware presents a significant and growing threat, not just to industry but to digital environments in general. Although, no complete protection against cyber threats will ever be realistic, a resilience against a certain level of threat should be achieved to safeguard industrial corporations. The existing cyber resilience of multinational corporations is arguably typically inadequate and, in the context of digital supply chain integration, the potential consequences are larger. This situation could be significantly improved through the decision on senior management level for effective adoption of existing standards, processes and resources. Cyber resilience requires conscious planning and relentless action from both the security provider and the multinational corporation. Effective internal procedures along with appropriate architecture of plant automation infrastructure, including response and recovery planning, can have a substantial impact on the resilience of a plants Operational Technology (OT) as well as its ability to withstand or recover from a cyber incident. This paper provides a practical perspective of cybersecurity resilience and defence in a multinational industrial environment. Some example recommendations that are both practical and effective are included.