Acquiring dual expertise in cybersecurity and OT systems remains rare but is rapidly growing. This expertise allows industrial players, particularly in the agri-food sector, to implement more effective defense strategies. This trend marks the beginning of a significant change, likely to influence machine specifications in the short term.
Often approached from a top-down perspective, industrial cybersecurity traditionally relies on IT systems to work its way up to machine components. However, this approach overlooks certain potential entry points for attackers, such as unsecured USB ports or IoT sensors.
Rethinking cybersecurity
Furthermore, this approach often ignores the specific characteristics of OT systems, particularly their continuous operation, which makes it difficult to perform security analyses and update installations.
Faced with the increasing convergence of IT and OT systems in factories, a review of cybersecurity practices is essential. This trend is already evident in the development of specialized OT system offerings by cybersecurity experts, as well as in the recruitment of OT specialists by CISOs of large industrial companies.
Benjamin Leroux, marketing manager at Advens, emphasizes: "Business leaders and industrial production managers primarily demand tailored solutions. It is our responsibility to develop the skills necessary to meet the demands of the production environment."
Marc Coutelan, Sales Director for France at Nozomi Networks, adds: "Our company was born from the observation of a lack of suitable tools on the market, expressed by one of our founders, a former SOC manager."
Increasing involvement of equipment manufacturers
For Marc Coutelan, protecting production lines is a collective effort: “Attackers will always outnumber us. It is crucial to share our information and progress together.” Benjamin Leroux agrees: “Geppia is one of the organizations that encourages these exchanges. Our discussions with user companies, machine manufacturers, and automation suppliers stimulate new ideas, particularly regarding cybersecurity financing.”.
In the near future, the security of process and packaging machinery could become an essential service for manufacturers. Until then, OEMs are advised to integrate cybersecurity from the design stage, systematically disabling unused services and securing machines with up-to-date operating systems and PLCs.
According to the European Union Agency for Cybersecurity (ENISA), a cyberattack results in an average production downtime of 21 days. This period can extend to 12 to 14 months before a return to optimal operating conditions, according to data collected by Advens. "Our awareness campaigns are starting to bear fruit," concludes Benjamin Leroux. "We are seeing more and more agri-food companies launching cybersecurity initiatives.".
