Story image

Two thirds of A/NZ businesses concerned about IoT and OT security

22 Nov 2017

Enterprises across the globe are worried about the impact of Internet of Things (IoT) technology and operational technology (OT), according to a recent survey commissioned by ForeScout.

Security and line of business (LoB) leaders are experiencing high anxiety levels because of IoT and OT security concerns.

82% of organisations struggle to identify all devices connected to their network. Furthermore, IT and LoB leaders don’t actually know who is responsible for securing IoT or OT devices.

Distress also comes from added costs and time needed to manage those devices, as well as a lack of security skills.

The sentiment was echoed across Australia and New Zealand. Steve Redman, ForeScout’s general manager of Asia Pacific and Japan, says that 63% of A/NZ businesses are anxious about IoT security.

“There is no alignment with budget and focus. There is a definite need for ANZ businesses to conduct a thorough audit of IoT devices to further boost their confidence and relieve some of their anxiety,” Redman explains.

"The survey also shows an under-investment in IoT security in A/NZ compared to the rest of the world. What's more, 68% of A/NZ businesses are willing to tolerate a medium to high level of risk in relation to compliance requirements for IoT. When it comes to considering an IoT solution, ease of implementation takes precedence over speed of implementation." 

76% of A/NZ respondents believe that increased IoT device usage creates ‘significant’ security challenges.

Budget constraints are the biggest barrier to IoT security investment according to 45% of IT leaders and 43% of LoB leaders. Instead, they are forced to adapt their existing strategy to cover IoT and OT.

This also contributes to the lack of knowledge about how many devices are accessing a network.

However, respondents believe that top-down executive support, proper security tools and audits will increase confidence in device visibility.

“The survey results demonstrate a dynamic shift in the way organisations are starting to think about security and risk as it relates to IoT. Each new device that comes online represents another attack vector for enterprises and it only takes one device to compromise an entire network and disrupt business operations, which can impact the bottom line,” comments ForeScout president and CEO Michael DeCesare.

 “Securing IoT is not just a cybersecurity issue, it is a business issue and operating at any risk level is too much. Enterprises need full visibility.” 

According to the survey, the top four reasons for anxiety amongst A/NZ IT and business professionals are:

  • Added maintenance and costs (54%)
  • Fear of complexity (41%)
  • The potential damage from a security breach (35%)
  • Lack of experts to manage the solution (35%)

The survey polled 600 global enterprises.

Machine learning is a tool and the bad guys are using it
KPMG NZ’s CIO and ESET’s CTO spoke at a recent cybersecurity conference about how machine learning and data analytics are not to be feared, but used.
Seagate: Data trends, opportunities, and challenges at the edge
The development of edge technology and the rise of big data have brought many opportunities for data infrastructure companies to the fore.
Popular Android apps track users and violate Google's policies
Google has reportedly taken action against some of the violators.
How blockchain could help stop video piracy in its tracks
An Australian video tech firm has successfully tested a blockchain trial that could end up being a welcome relief for video creators and the fight against video piracy.
IBM X-Force Red & Qualys introduce automated patching
IBM X-Force Red and Qualys are declaring a war on unpatched systems, and they believe automation is the answer.
Micro Focus acquires Interset to improve predictive analytics
Interset utilises user and entity behavioural analytics (UEBA) and machine learning to give security professionals what they need to execute threat detection analysis.
Raising the stakes: McAfee’s predictions for cybersecurity
Security teams and solutions will have to contend with synergistic threats, increasingly backed by artificial intelligence to avoid detection.
Exclusive: Ping Identity on security risk mitigation
“Effective security controls are measured and defined by the direct mitigation of inherent and residual risk.”