Prepare now (yes, now) for the inevitable cybersecurity incident

摘要

Almost every day we hear news of a company dealing with a cybersecurity problem. Ransomware. Data breach. Nation state. The loss of production systems from a single cybersecurity event can have a financial impact of hundreds of millions of dollars. Organizations that use any kind of automation system need to take proactive, defensive steps immediately to avoid significant business disruption and lost revenue. Normally, I would be preaching the gospel of the NIST Cybersecurity Framework, the foundational elements set forth in the ISA/IEC 62443 standard, and the virtues of a sound risk assessment methodology. These methods have significant merit and are part of a comprehensive cybersecurity strategy. They simply take time to implement--and, in fact, many companies are just beginning their cybersecurity journey and do not know where to start.