The Manufacturing Sector Remains Vulnerable to Account Compromise and Supply Chain Attacks in the Cloud
Netwrix study reveals that manufacturing organizations experienced these types of attacks more often than any other industry surveyed.
According to a survey conducted by cybersecurity company Netwrix, half (51 percent) of manufacturing companies experienced an attack on their cloud infrastructure within the last 12 months. The most common type of attack was phishing, reported by 73 percent of respondents. The findings are part of the global 2022 Cloud Security Report.
Compared to other industries, the manufacturing sector turned out to be more prone to account compromise and supply chain attacks within the last year: 38 percent of respondents in this sector had to deal with account compromise at least once, while the average for all other industries was 31 percent. Similarly, 19 percent of manufacturing organizations experienced supply chain compromise but only 15 percent of respondents from other verticals reported this type of attack.
"The most common reason for cloud adoption in the manufacturing sector (cited by 57 percent of respondents) is supporting remote workers. Business pressure to grant remote access quickly to many workers leads to a wider attack surface and might be the root cause for the increased number of account compromise attacks," comments Dirk Schrader, VP of security research at Netwrix. "To mitigate this risk, manufacturing organizations should pay closer attention to identity management, especially for privileged accounts. A zero standing privilege approach is particularly effective in this situation since it creates accounts only on request and deletes them once the specified task is completed."
The survey also shows that cloud adoption in the manufacturing sector is progressing slower than in other markets. Indeed, while on average 41 percent of workloads are already in the cloud, manufacturing organizations have moved only 35 percent of their operations there. Lack of budget is the main factor slowing cloud adoption; 45 percent of respondents in this industry highlighted this reason, compared to 35 percent overall.
Another difference is that manufacturing organizations are more concerned about the cyber risks associated with their own employees – 48 percent of respondents consider their staff to be one of the biggest risks to data security in the cloud, which is 11 percent more than average. This affects cybersecurity decisions: In the manufacturing sector, 75 percent have implemented multifactor authentication and 70 percent audit user activity, compared to 69 percent and 58 percent respectively in the other industries. Moreover, 41 percent of manufacturing companies plan to start performing regular review of access rights.
"Cloud adoption is accelerating in the manufacturing sector: These organizations report that they expect 52 percent of their workloads to be in the cloud by the end of 2023, up from the current 35 percent. Fast implementation of cloud computing could cause security gaps. Paying close attention to securing all three attack vectors — data, identities and infrastructure — will reduce the risk of infiltration and its consequences," adds Schrader.
For more information, visit www.netwrix.com.
RELATED CONTENT
-
Five Reasons Why the Right Strategy Leads to the Success of Digital Transformation Implementation
The past few years have proven that digital transformation (DT) is more than just a trend. It is becoming one of the frontrunners for ensuring business continuity through modernizing times. However, despite being an essential component for adaptability in a competitive industry, not all companies would consider their DT implementation a success.
-
Market Outlook 2022 Forecasts Stability and Cautious Optimism
VMA’s annual Market Outlook Workshop reflects on positive growth and looks ahead to a stabilizing 2022, although supply chain and labor issues loom large.
-
Process Instrumentation in Oil and Gas
Process instrumentation is an integral part of any process industry because it allows real time measurement and control of process variables such as levels, flow, pressure, temperature, pH and humidity.