Connect with us

E-Business

Underinvestment, Human Errors Put ICS Security in Key Verticals at Risk – Report

Published

on

Kindly share this post

According to Kaspersky Lab’s  State of Industrial Cybersecurity 2018’ survey, industrial and energy enterprises, as well as transport and logistics companies, have different opinions regarding the negative effects of cyberattacks on their industrial networks.

But, when it comes to the issues affecting their ability to keep networks secure there are three key concerns they can agree on; understaffing, underinvestment by senior management and the human factor. And with almost 40%* of ICS computers facing attacks every 6 months, these cybersecurity gaps in critical infrastructure can significantly increase the risks for organisations.

Different fears

Depending on the industry, organisations have different assessments concerning the damage caused to their business by cyberthreats. For transport and logistics companies that build their business based on a service model, the most negative impact is losing customer confidence (75%). But for the majority of manufacturing enterprises (66%) and energy companies (73%), their biggest concern is compromising the quality of production due to a cyberattack.

Our research found that despite the frequency and debilitating impact of ICS network attacks, only 52% of companies have dedicated response measures in place to deal with such an incident.

This is compared to the protection afforded to corporate networks, which is at a more mature level: the majority (77%) have implemented response measures in the case of incidents affecting corporate IT.

There are several common reasons why this might be the case, which unite industrial organisations as they struggle to keep ICS networks secure.

Under-resourced and under-skilled

The task of protecting industrial networks often falls to those providing corporate information security. In 40% of manufacturing organisations, ICS protection is the responsibility of corporate IT security officers. Within transport and logistics companies, over half of those surveyed (58%) confirm that ICS safety is provided by a dedicated team working full-time to combat threats.

Industrial organisations, especially those with complex technological processes, need highly specialised, qualified employees to fill the gap. For example, in the energy sector, where national critical infrastructure is managed with the help of ICS, the main challenge when it comes to security management (61%) is hiring employees with the relevant skills.

Lack of top management involvement causes underfunding

In many enterprises, IT security is a priority for senior management, but in more than half (54%) of manufacturing companies, top management is little – if at all – involved in ICS protection issues, which results in underinvestment.

Indeed, two-thirds (66%) do not have a dedicated budget for providing security of critical infrastructure. And this position remains unchanged, even in the event or risk of an incident, with 17% of manufacturing organisations not considering this a sufficient enough reason to invest in ICS security.

The human factor is an evergreen problem in ICS security

The consequences of employee errors pose a critical threat to half of all organisations in all sectors (49%). This is not surprising, given that after malware and ransomware, it is the most common reason for security incidents in ICS (27%).

Fortunately, companies are aware of this problem and are trying to solve it by training personnel and creating rules of behavior on critical infrastructure objects. 82% of organisations have already implemented training for employees, contractors and vendors.

Whatever the most feared consequences for industrial organisations, the only way to prevent or lessen the effect of an attack is to put in place robust safety measures and procedures for ICS networks.

Monitoring and timely responses to incidents on industrial networks should become key IT security priorities, along with educating and arming staff on how to minimise the risks to their business.

“Cyberthreats are constantly evolving and targeted attacks, such as the recent Triton and Industroyer, exploit employee weakness. Incidents caused by accidental actions of employees can lead to data leaks and the failure or complete shutdown of production processes. For enterprises, this could lead to huge financial and reputational losses.

“To stop this from happening, a combination of technical and administrative measures is required, which includes both the training of personnel and implementation of specialised cyberdefense systems for all levels of industrial infrastructure,” said Georgy Shebuldaev, Head of Kaspersky Industrial Cybersecurity Business Development.


Kindly share this post

Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

E-Business

Microsoft to Boost AI Growth with $80Bn Investment

Published

on

Kindly share this post

Microsoft has announced plans to invest $80 billion in the 2025 fiscal year to expand its data centre infrastructure.

Microsoft to Boost AI Growth with $80Bn Investment

The investment will focus on supporting the training of artificial intelligence (AI) models and the deployment of AI and cloud-based applications.

The company disclosed this initiative in a blog post on Friday, emphasising its commitment to advancing AI and cloud technology.

Since OpenAI launched ChatGPT in 2022, investment in AI has surged as businesses across sectors strive to integrate artificial intelligence into their products and services.

AI requires enormous computing power, pushing demand for specialised data centres that enable tech companies to link thousands of chips together in clusters.

Before now, Microsoft has invested billions of dollars to enhance its AI infrastructure, broadening its data centre network.

Analysts project Microsoft’s fiscal 2025 capital expenditure, including capital leases, to reach $84.24 billion, according to Visible Alpha.

The company’s capital expenditure in the first quarter of the fiscal year rose by 5.3% to $20 billion.

As the primary backer of OpenAI, the tech giant is considered a leading player among Big Tech companies in the AI race, owing to its exclusive partnership with the AI chatbot developer.

More than half of Microsoft’s $80 billion investment will be allocated to the United States, Brad Smith, vice chair and president noted in the blog post.

“Today, the United States leads the global AI race due to the investment of private capital and innovations by American companies of all sizes, from dynamic start-ups to well-established enterprises,” Smith remarked.

 

 

 


Kindly share this post
Continue Reading

E-Business

NDPC to Impose Heavy Fines on Defaulting Data Processors, Controllers this Year

Published

on

Kindly share this post

Nigeria Data Protection Commission (NDPC) has announced plans to significantly ramp up enforcement and impose substantial fines on data controllers and processors that violate the Nigeria Data Protection Act (NDPA) of 2023.

NDPC to Impose Heavy Fines on Defaulting Data Processors, Controllers this Year

Vincent Olatunji, national commissioner/CEO. NDPC

This was disclosed by Dr Vincent Olatunji, national commissioner/CEO of the Commission, in a video message outlining the Commission’s 2025 agenda, shared on the agency’s social media platforms.

A statement issued by the Communications Division of the Commission on Friday quoted Dr Olatunji as saying that, “For data controllers and processors, there is going to be massive enforcement. We have never really issued any fine, but going forward, you’ll hear us giving heavy penalties.”

He assured Nigerians that their data rights, as guaranteed by the NDPA, will be fully protected, and defaulting data controllers and processors will face strict consequences.

The Commissioner highlighted the NDPC’s extensive engagements with stakeholders across public and private sectors to promote awareness and compliance with the Commission’s mandate.

The efforts, he said, have resulted in the signing of Memorandums of Understanding (MOUs) with key organisations, including the National Insurance Commission (NAICOM), National Lottery Regulatory Commission (NLRC), the Data Privacy Office of Canada, and the Dubai International Financial Centre Authority (DIFC), among others.

Dr Olatunji also shared that the NDPC will advance to the second phase of its Strategic Roadmap and Action Plan (NDP-SRAP 2023-2027) in 2025.

This phase is expected to create job opportunities within Nigeria’s data protection and privacy ecosystem, particularly for young people.

The Commission has been actively training Nigerians in data protection and privacy, creating a pool of globally competitive experts within the data protection sector in 2025.

“There are a lot of data controllers and processors that are looking for people to work with them. Now those that we have trained in 2024, those we have certified, we are going to do more this year to actually launch them to the job market where they can really work with data controllers and processors,” he said.

Additionally, the NDPC will continue nationwide efforts to promote data protection awareness.

The Commission aims to educate citizens about their rights and the importance of data privacy while reminding data controllers and processors of their obligations under the NDP Act.

Dr Olatunji emphasised that these initiatives are part of the broader goal to embed a culture of data protection and privacy in Nigeria.

As part of its international engagement efforts, Nigeria will host the “Network of African Data Protection Authorities Conference” in May 2025, with over 40 nations with existing data protection laws expected to attend.

According to Dr Olatunji, this global event will position Nigeria as a leader in the data protection ecosystem, and bring significant economic benefits to the country.

The NDPC reiterated its commitment to ensuring data protection and privacy become integral to Nigeria’s digital landscape, building trust and fostering economic growth, the statement added.


Kindly share this post
Continue Reading

E-Business

NIPOST Reports 275 Percent Revenue Growth in 2024

Published

on

Kindly share this post

Nigeria Postal Service (NIPOST), achieved a 275 percent increase in revenue for the year 2024, according to Tola Odeyemi, postmaster general.

NIPOST Reports 275 Percent Revenue Growth in 2024

At the beginning of the year, NIPOST set an ambitious target of generating N10 billion in revenue.

Although specific figures for the end of the year were not disclosed, the reported increase suggests a significant recovery for the postal service, which had previously faced consistent decline.

Odeyemi, who made the disclosure while listing NIPOST’s achievements for the year recently, attributed the growth to a series of reforms aimed at enhancing service quality and eliminating revenue leakages

The NIPOST boss detailed the steps taken to boost revenue, noting the implementation of Point of Sale (PoS) terminals in high-transaction areas, which has streamlined payment processes and improved customer experience.

She said, “One of the major achievements for us in 2024 has been a 275% increase in revenue from 2023. We achieved this by plugging a lot of the revenue leakages that we have by deploying PoS terminals for payment in our high transaction areas, as well as ensuring that our quality of service goes up.”

Looking ahead, Odeyemi outlined NIPOST’s plans to sustain this growth trajectory.

She said the organisation has embarked on renovations and upgrades of key locations in Abuja, Lagos, and Kaduna, alongside enhancements to the Postal Institute, which is central to the agency’s change management initiatives.

Furthermore, she stated that NIPOST is gearing up for several major developments in 2025, including the rollout of a national addressing system and digital postcode services, specialised logistics for agriculture and healthcare, and a relaunch of its financial services.

“There will be infrastructure upgrades, which will take place across the Federation and there will be an increase in access to government services through your local NIPOST location,” she said.


Kindly share this post
Continue Reading

Trending