On September 29, 2021, experts of JSC "CMSR", in an online format, took part in the work of the Third International Symposium on Emergency Response in Ensuring the Safety of Industrial Information.
The symposium was attended by more than 200 important guests from governments, scientific research organizations and global enterprises. The event was organized by the Yinbao International Center in Beijing.
The panelists discussed issues related to risks and threats to information security for industrial companies during the COVID-19 pandemic.
During the sectional work, experts noted the negative global trend of increasing cyber attacks on industrial enterprises, the purpose of which is to stop production, disrupt technological and business processes. So, in 2020, the industrial sphere was the second most popular among hackers after the state – 12% of attacks were directed at it. The motive for most of the attacks was to obtain data from industrial companies.
Experts have identified eight main threats to information security at work:
#nbsp;- unauthorized access to information resources;
#nbsp;- unauthorized use of remote access to the process of managing a production facility;
#nbsp;- hacker attacks carried out through corporate (office) information networks;
#nbsp;- attacks on standard components of the infrastructure of control networks of automated control systems;
- DDoS attacks;
- personnel errors, intentional sabotage and damage to control system components. The risks in these situations, if an attacker has access to the automated control system, are serious and unpredictable;
- introduction, through removable media, of virus and other malicious programs by persons authorized to service the equipment. Often these are employees of service organizations;
- an attack on the network components of the control system, with the spread to industrial infrastructure facilities.
As a result of the event, priority areas of cooperation were developed in the field of creating a platform for international cooperation and exchange of information on emergency response in the field of industrial information security.
To assess the risks and threats to information security in production, it is proposed to consider at the national level the creation and use of cyber polygons for various industries and critical infrastructure.