2022-06-16-KPMG_Global-Control_Systems_Cyber_Security_Report_2021_58页_2mb

Control System Cyber Security Annual Report 2022 Summary

Key Findings and Trends:

1. Threat Landscape:

   • Ransomware and state-sponsored attacks are primary concerns, exacerbated by IT/OT convergence.
   • Negligent insiders remain the most common threat actor (43.8% in 2022), with state-sponsored attacks posing significant risks.

2. Investment and Budget Constraints:

   • Budgets increased in 60.4% of organizations, with a notable rise in ransomware-related expenses.
   • Small to medium-sized businesses (SMBs) report the tightest budget constraints, with 5.1% experiencing budget decreases.

3. Security Maturity Levels:

   • Organizations with High Maturity (High M) programs invest more in patch management and network monitoring compared to Low Maturity (Low M) counterparts.
   • High M organizations use diverse frameworks (NIST, C2M2, ISA/IEC 62443) and technologies like unidirectional gateways and active IPS.

4. Critical Infrastructure Protection:

   • Respondents prioritize protecting worker and public safety, continuous operations, and product quality.
   • Supply chain security is underinvested, with only 12.3% investing significantly.

5. Training and Awareness:

   • Security awareness training gaps persist: 18% of organizations have no such programs.
   • Companies with mature programs increasingly use tabletop exercises and phishing simulations.

6. Technology Adoption:

   • Hardware-based security solutions (e.g., unidirectional gateways) are gaining traction.
   • Cloud security and vendor assessments are becoming more frequent.

7. Incident Response:

   • 9.0% of respondents reported over 10 high-impact security incidents in the past year.
   • Testing of response plans increased, with High M organizations demonstrating better preparedness.

Recommendations:

• Invest in employee training and secure supply chain management.
• Adopt layered security measures, including network segmentation and advanced monitoring tools.
• Foster IT/OT collaboration to address growing cyber threats.