“ If you wait to simply do testing as a final stage , you may reduce your costs up front but you ' ll actually increase your costs overall for the project , because the retrofit of security into a project which hasn ' t had security built in by design can often be as much as 30 to 40 % of the total project cost ”
BSI CYBERSECURITY
DID YOU KNOW ...
INDUSTRY 4.0
• By 2024 , the world will no longer be talking about OT because it will all be the Industrial Internet of Things ( IIoT )
• By 2025 there are expected to be 75 billion IoT devices connected to the Internet , resulting in even greater risks and challenges facing CISOs
• Over the past three years , more than 60 % of organisations have added industrial security responsibility to the CISOs ’ already over-flowing portfolio
• 80 % of organisations say they are now starting to address OT and IoT cybersecurity .
Source : bsigroup Insigvhts Industry 4.0 these machine-led environments is safety and availability , therefore much emphasis needs to be laid on ensuring that board level discussions consider these differences between enterprise and industrial IT , and safeguard them with the right security tools . From a strategic perspective , organisations should follow a phased approach – first , identifying the assets of their environment and detecting the risks they pose . Next , determining the response to failure and putting a framework in place for governance and recovery . The final step would be to actually implement that framework in a sustainable , rather than project-focused manner . Mark uses the example of when discussing the impact that IoT will have on the environment . He says that globally , over 50 % of people buying new cars consider security as a key purchase decision , putting evidence out there which indicates that placing security into the process provides a continual assurance in the decision-making process .
“ If you wait to simply do testing as a final stage , you may reduce your costs up front but you ' ll actually increase your costs overall for the project , because the retrofit of security into a project which hasn ' t had security built in by design can often be as much as 30 to 40 % of the total project cost ”
MARK BROWN GLOBAL MANAGING DIRECTOR , CYBERSECURITY AND INFORMATION RESILIENCE , BSI
306 June 2021