Manufacturing

Manufacturing is an endpoint-rich industry.

Some industrial operations can have hundreds if not thousands of endpoints, and each must be secured, maintained, updated and given a secure connection to apps and other network resources. Any organization in the manufacturing sector, including the supply chains servicing the sector, is at a high risk of cyber-attacks. As manufacturing organizations grow, they must innovate and take advantage of automation, Al and hyper connected network comms, leaving a large attack surface that cyber criminals can target.

Some Key Areas To Review

Phishing

  • Phishing attacks within the manufacturing industry are very common.
  • Suspect emails with malicious links/fraudulent attachments.
  • Web-based malware downloads that contain viruses or other malicious content.
  • Because the manufacturing industry primarily focuses on production and distribution, security can become laxed.
  • If a manufacturer has government contracts, they are a prime target for Industrial Espionage.

Supply Chain Attacks

  • Threat actors access an organization’s network via a third-party vendor or supplier.
  • In recent years, supply chain attacks within the manufacturing industry have become more prominent.
  • It can take the form of hardware, software and firmware-based supply chain attacks.

Ransomware

  • Cybercriminals can deploy ransomware on an organization’s infrastructure and hold sensitive and vital data for ransom.
  • Attackers rely on the ripple effect when manufacturing organizations have their production flow disrupted.
  • 47% of the attacks within the manufacturing industry were due to vulnerabilities that companies didn’t patch.

Industrial IoT Attacks

  • Industrial IoT (Internet of Things) devices like printers and smart TVs are at a high risk of attack.
  • Each device should have a strong, unique ID and up-to-date software. Unnecessary services and ports must be disabled.
  • Devices utilizing manufacturing processes, such as Remote Production Control and Industrial Asset Management, are at risk.
  • Network activity must be monitored to determine unauthorized use.

Cyber Attacks in Manufacturing Highlight

In 2017, Mondoler, a multinational food and beverage company, succumbed to an attack that leveraged the encrypting malware NotPetya. The attack permanently damaged 1,700 servers and 24,000 laptops. It also impacted production facilities around the globe. The attack included the theft of thousands of user credentials and Impacted the company’s ability to complete customer orders.

Get Same Day Support!

When IT issues strike, you need same day solutions and an IT Helpdesk that will get your team back to work.

Our IT company provides IT solutions for SMEs across Canada. With experts in every field of IT, you never have to wait for contacts at some vendor – we take care of it.

Key NIST/CyberSecure Canada control points:

Mobile Computing

  • Ensure your laptop and personal digital assistant (PDA) are encrypted and password-protected.
  • If a computer or PDA uses wireless connections, ensure all wireless communications are encrypted.
  • Ensure encrypted backups are in place.
  • When using USB flash drives, use only devices that have built-in encryption and require passwords.
  • Implementation of mobile device management to deploy org-wide configuration and compliance policies.

Endpoint Detection & Response

  • Install Endpoint Detection & Response (EDR) or Extended Detection & Response tools.
  • Continuously monitor end-user devices to detect and respond to cyber threats like ransomware and malware.
  • Pair comprehensive visibility across all endpoints and apply behavioural analytics to detect traces of suspicious behaviour.

Email Security

  • Use appropriate signatures and standard disclaimers on email messages, faxes and other documents.
  • Train employees on analyzing and detecting spam/phishing emails.
  • Be cautious of communicating sensitive information via email – Set up policies to apply rules when sending emails.

General

  • Perform weekly scans to ensure endpoints are up to date and unauthorized software is not installed.
  • Make regular secure backups.
  • Ensure policies are in place preventing access to restricted websites and software.
  • Implement Multi-Factor Authentication (MFA).

Did you know...

According to IBM, Manufacturing was the sector most attacked in Canada in 2021, with the total number of attacks projected to grow in the coming years.

fixing server

Fusion Computing targeted remediation:

Risk Assessments

Risk must be gauged based on factors such as probability of occurrence, impact on the organization, and risk prioritization.

Risk assessments should be conducted or reviewed regularly and at least once per year.

Security Controls

  • Anti-virus and MDR
  • Secure encrypted backups
  • Data Loss Prevention
  • Encryption at rest and in transit
  • Firewall
  • Incident Response Plan
  • Mobile Device Management
  • Policies and procedures
  • Security Awareness Training
  • Vulnerability Management
  • Multi-Factor Authentication

The CIS Critical Security Controls (CIS Controls) are a prescriptive, prioritized, and simplified set of best practices Fusion uses to strengthen your cybersecurity posture. This simplified cybersecurity approach is proven to help you defend against today’s top threats.

Testimonials

See why top employers and small business leaders say Fusion is the Best IT Company in Toronto

"It is refreshing to work with a technology vendor that is reactive in an expedient manner to our needs as a business. Fusion takes the time to learn what your current and future goals are, offers options to help you achieve them, and make you feel like your business is valued. This partnership has allowed us to reinforce the security of all our operations, protect our customers, and increase our overall efficiency. What a great TEAM!"

Naomi Clarke

Idea Factor

"I have worked closely with Fusion over the past year and I have to say that these guys are great. They manage our Infrastructure, Virtual Machines, Backups, Security, implemented our Cloud Solution with O365 and are our IT Support for staff and desktops. They came highly recommended so I am doing the same for you."

Judie Law

"Fusion Computing has been the best IT Services provider we’ve ever had. Their managed IT services offering covers all 4 of our JP Motors locations bumper to bumper. They take the time to work with us to help us understand our budget and provide solutions from help-desk through to IT Strategy. Highly recommended!"

Ryan Pattinson

JP Motors

Latest Blogs

Learn about critical IT topics from our experts. We cover everything from new cloud based tools, to IT outsourcing and disaster recovery.

  • construction manager using digital tablet at construction site

    Managed IT Services for the Construction Industry

    In an era driven by technology, the construction industry is undergoing a digital transformation, leveraging advanced tools and software to enhance efficiency, collaboration,

  • csat survey selection buttons

    The Benefits of CSAT Surveys in Information Technology

    Customer satisfaction is one of the most critical benchmarks for success in any industry, and Information Technology (IT) is no exception. With the

  • security audit checklist

    Understanding BGP Hijacking: Threats and Prevention

    Understanding BGP Hijacking: The Threat and How to Prevent ItIn today’s interconnected world, the integrity of internet routing is crucial. However, incidents like BGP

construction manager using digital tablet at construction site

Managed IT Services for the Construction Industry

In an era driven by technology, the construction industry is undergoing a digital transformation, leveraging advanced tools and software to enhance efficiency, collaboration,

csat survey selection buttons

The Benefits of CSAT Surveys in Information Technology

Customer satisfaction is one of the most critical benchmarks for success in any industry, and Information Technology (IT) is no exception. With the

security audit checklist

Understanding BGP Hijacking: Threats and Prevention

Understanding BGP Hijacking: The Threat and How to Prevent ItIn today’s interconnected world, the integrity of internet routing is crucial. However, incidents like BGP

Don’t Keep Letting Your IT Get in the Way of Your Growth

Book a FREE, no obligation IT Assessment to get a clear picture of your current IT situation