Story image

Two thirds of A/NZ businesses concerned about IoT and OT security

22 Nov 2017

Enterprises across the globe are worried about the impact of Internet of Things (IoT) technology and operational technology (OT), according to a recent survey commissioned by ForeScout.

Security and line of business (LoB) leaders are experiencing high anxiety levels because of IoT and OT security concerns.

82% of organisations struggle to identify all devices connected to their network. Furthermore, IT and LoB leaders don’t actually know who is responsible for securing IoT or OT devices.

Distress also comes from added costs and time needed to manage those devices, as well as a lack of security skills.

The sentiment was echoed across Australia and New Zealand. Steve Redman, ForeScout’s general manager of Asia Pacific and Japan, says that 63% of A/NZ businesses are anxious about IoT security.

“There is no alignment with budget and focus. There is a definite need for ANZ businesses to conduct a thorough audit of IoT devices to further boost their confidence and relieve some of their anxiety,” Redman explains.

"The survey also shows an under-investment in IoT security in A/NZ compared to the rest of the world. What's more, 68% of A/NZ businesses are willing to tolerate a medium to high level of risk in relation to compliance requirements for IoT. When it comes to considering an IoT solution, ease of implementation takes precedence over speed of implementation." 

76% of A/NZ respondents believe that increased IoT device usage creates ‘significant’ security challenges.

Budget constraints are the biggest barrier to IoT security investment according to 45% of IT leaders and 43% of LoB leaders. Instead, they are forced to adapt their existing strategy to cover IoT and OT.

This also contributes to the lack of knowledge about how many devices are accessing a network.

However, respondents believe that top-down executive support, proper security tools and audits will increase confidence in device visibility.

“The survey results demonstrate a dynamic shift in the way organisations are starting to think about security and risk as it relates to IoT. Each new device that comes online represents another attack vector for enterprises and it only takes one device to compromise an entire network and disrupt business operations, which can impact the bottom line,” comments ForeScout president and CEO Michael DeCesare.

 “Securing IoT is not just a cybersecurity issue, it is a business issue and operating at any risk level is too much. Enterprises need full visibility.” 

According to the survey, the top four reasons for anxiety amongst A/NZ IT and business professionals are:

  • Added maintenance and costs (54%)
  • Fear of complexity (41%)
  • The potential damage from a security breach (35%)
  • Lack of experts to manage the solution (35%)

The survey polled 600 global enterprises.

Secureworks Magic Quadrant Leader for Security Services
This is the 11th time Secureworks has been positioned as a Leader in the Gartner Magic Quadrant for Managed Security Services, Worldwide.
Google puts Huawei on the Android naughty list
Google has apparently suspended Huawei’s licence to use the full Android platform, according to media reports.
Using data science to improve threat prevention
With a large amount of good quality data and strong algorithms, companies can develop highly effective protective measures.
General staff don’t get tech jargon - expert says time to ditch it
There's a serious gap between IT pros and general staff, and this expert says it's on the people in IT to bridge it.
ZombieLoad: Another batch of flaws affect Intel chips
“This flaw can be weaponised in highly targeted attacks that would normally require system-wide privileges or a complete subversion of the operating system."
Forget endpoints—it’s time to secure people instead
Security used to be much simpler: employees would log in to their PC at the beginning of the working day and log off at the end. That PC wasn’t going anywhere, as it was way too heavy to lug around.
DimData: Fear finally setting in amongst vulnerable orgs
New data ranking the ‘cybermaturity’ of organisations reveals the most commonly targeted sectors are also the most prepared to deal with the ever-evolving threat landscape.
IXUP goes "post-quantum" with security tech upgrade
The secure analytics company has also partnered with Deloitte as a reseller, and launched a SaaS offering on Microsoft Azure.