5 cybersecurity resources for small manufacturers
Engineering360 News Desk | September 09, 2019The National Institute of Standards and Technology (NIST) says that more than 60% of U.S. small businesses have experienced a cyber attack in the last 12 months, and that roughly one-third of all reported attacks have targeted manufacturers.
Attacks can affect production and compromise data integrity. NIST estimates that the median cost of a data breach is around $60,000, a potentially significant sum for small manufacturers in competitive markets.
In recognition of Manufacturing Day, these resources may help protect your manufacturing business from cyber attack. In 2013, President Obama issued Executive Order 13636 directing NIST to develop the cybersecurity framework to protect critical infrastructures. The U.S. identified 16 critical infrastructure sectors: chemical; commercial facilities; communications; critical manufacturing; dams; defense industrial base; emergency services; energy; financial services; food and agriculture; government facilities; healthcare and public health; information technology; nuclear reactors, materials and waste; transportation systems; and water and wastewater systems.
In recognition of Manufacturing Day (MFG Day) on October 4, here are five cybersecurity resources for small manufacturers. In the comment section that follows, feel free to suggest other resources.
1. The NIST Interagency Report Small Business Information Security: The Fundamentals is a downloadable guide on how small businesses can provide basic security for their information, systems and networks. The report uses the NIST Framework for Improving Critical Infrastructure Cybersecurity as a template for organizing cybersecurity risk management processes and procedures.
2. The Framework for Improving Critical Infrastructure Cybersecurity focuses on using business drivers to guide cybersecurity activities and considering cybersecurity risks as part of the organization’s risk management processes. The Framework consists of three parts: the Framework Core, the Framework Profile and the Framework Implementation Tiers. (A 78-page pocket guide introduces both the NIST and its Cybersecurity Framework.)
3. The Cybersecurity Framework Manufacturing Profile offers implementation details developed for the manufacturing environment. The profile may be used as a roadmap — aligned with manufacturing sector goals and industry best practices — for reducing cybersecurity risk for manufacturers. The profile offers a voluntary, risk-based approach for managing cybersecurity activities and reducing cyber risk to manufacturing systems.
4. A two-page brochure, Scams and Small Manufacturers, provides a guide to identifying scams that specifically target small manufacturers. It also provides simple steps that can be taken immediately to better protect your manufacturing business.
5. A NIST MEP Cybersecurity Assessment Tool allows U.S. small manufacturers to self-evaluate the level of cyber risk to their business. The assessment is based on the Cyber Security Framework and the link opens up a survey tool to begin the evaluation process.