#USA #Cybersecurity #Copenhagen #Ransomware #Secomea

Rethinking Remote Access Governance in Manufacturing

In recent times, the manufacturing sector has faced a surge in ransomware and extortion attempts, urging companies to rethink how they manage remote access for operational technology (OT) systems. Secomea, a leading provider of secure remote access solutions, underscores the importance of revising access governance frameworks, particularly for third-party vendors operating within production environments.

Operational technology is critical for ensuring that production continues smoothly; however, this reliance on remote access has also made manufacturers vulnerable to cyber threats. With ransomware attacks increasingly targeting this sector, there is a pressing need for businesses to find a balance between maintaining operational efficiency and ensuring robust cybersecurity measures.

“Organizations often focus on preventing attackers from gaining entry,” says Knud Kegel, CTPO at Secomea. “However, it is equally important to assess what level of access remains after an initial breach.” For many manufacturers, third-party access is essential for maintenance, troubleshooting, and support, but the risk posed by unchecked access cannot be overlooked.

Key Strategies for Reducing Ransomware Risk

Secomea suggests manufacturers adopt several key strategies to minimize the threat posed by ransomware while ensuring continuous operation:

1. Limit Standing Access:
Remote access should be provided only when necessary and should be revoked immediately after the task is completed. This 'just-in-time' access minimizes the risk of misuse or unauthorized activities by third parties.

2. Enhance Visibility and Accountability:
Organizations must be able to monitor who accesses their systems, when these connections occur, and what actions are taken during the session. This level of transparency strengthens compliance adherence and supports incident investigation efforts.

3. Prepare for Containment:
Developing the capability to promptly isolate affected assets in case of suspicious activities is essential for preventing potential disruptions from spreading across the production environment.

By incorporating these practices, manufacturers can move towards effective OT access governance that prioritizes both operational continuity and cybersecurity, leading to reduced cyber risks.

Designing a Ransomware-Resilient OT Remote Access Strategy

As part of updating their cyber resilience strategies, Secomea recommends manufacturers evaluate whether the following critical controls and processes are established:

• - Implementation of just-in-time vendor access rather than persistent connections.
• - Approval-based workflows to manage access to essential systems.
• - Adherence to least-privilege permissions for both users and vendors.
• - Maintenance of detailed audit trails that facilitate compliance, contingency planning, and forensic investigations.
• - The capability to swiftly isolate compromised assets when incidents arise.

“The narrative is shifting from merely enabling remote access to governing it properly,” emphasizes Kegel. “Manufacturers do not require less connectivity, but rather better governance of their remote connections.” Organizations capable of monitoring, limiting, and containing remote access can substantially lessen the impact of security breaches when they occur, aiding in the preservation of operational integrity.

Conclusion

In today’s manufacturing landscape, where ransomware resilience is of utmost importance, the governance of remote access is becoming foundational. Enhanced visibility, just-in-time access protocols, and containment strategies are essential components for protecting operational technology environments from growing cyber threats. As manufacturers navigate this changing landscape, the emphasis on refining remote access governance will prove vital to ensuring sustained productivity amid escalating cybersecurity challenges.

About Secomea

Secomea is recognized for its innovative Secure Remote Access solutions tailored for industrial networks and operational technology. With over 8,000 manufacturers and machine builders utilizing its services globally, Secomea works to enable secure connections while promoting operational control and efficiency. Their focus on enabling organizations to better manage vendor access aligns with rising cybersecurity standards, reinforcing the resilience of the manufacturing ecosystem.