Addressing industrial cybersecurity risk affecting the industry - Paper Technology International 2023 - Paper Technology International 2023 - Flipbook - Page 77

Addressing industrial cybersecurity risk affecting the industry - Paper Technology International 2023

PAPERTECHNOLOGYINTERNATIONAL
Addressing industrial cybersecurity risk affecting the industry - Paper Technology International 2023
The Colonial Pipeline ransomware
attack was believed to have been carried out by
cyber criminals who sent phishing emails targeting company
employees. Employees who shared their credentials reportedly
allowed hackers to exploit remotely accessible accounts, systems,
and more.
That is why employee cyber awareness training is essential.
Pulp and paper manufacturers should train all employees in security
awareness subjects related to their role and develop a security
awareness training plan. Topics on which to educate employees
during this training include the company’s information security policy,
IT and OT access, best practices, and access to relevant machines
and systems by authorized users only.
Financially-motivated ransomware attacks
Many cyber attacks can result in ransomware demands.
Pulp and paper manufacturing is a multi-billion dollar global industry.
The recent pandemic increased demand for corrugated cardboard
and pulp production. From toilet paper and package shipments to
paper goods for food deliveries, CIPA (the European association
representing the paper industry) noted this trend in its 2021 annual
statistics.
Criminal ransomware gangs try to find and exploit any OT
and IT security vulnerabilities that industrial manufacturers have.
We know of at least three real-world cyber attacks against pulp and
paper manufacturers. Two of these attacks in North America resulted
in ransomware demands.
Geopolitical risks impact manufacturing operations security
Like other industries, geopolitical conflicts can increase OT
and IT security risks for pulp and paper manufacturers. After Russia
invaded Ukraine, sanctions imposed on Russia by the US and EU
affected supply chain security for raw materials like Russian birch
trees. Until recently, these trees’ pulp was relied on to soften toilet
paper tissue. Russia responded to these sanctions, in part, by
prohibiting birch wood exports, limiting its supply of liquid natural gas
to Europe, and more.
Russia has a history of using either private threat actors
or state employees to carry out global cyber attacks against
industrial manufacturers. The risks of such
attacks increase when Russia has a
vested economic interest in trading its
own raw materials and goods that are
relied upon by other countries and foreign
manufacturers, particularly in cases
of political or trade disputes.
This is an important
reason why pulp and paper
manufacturers should
proactively
enhance
their IT and
OT security
postures to
reduce the risk
of cyber attacks.
Taking a “wait and see” approach
to safeguarding their industrial operations means
any response will come too late.
Proven cybersecurity value for industry clients
OTORIO has extensive, proven experience working with
global pulp and paper industry manufacturers to assess, monitor,
and manage digital risk. This includes ensuring comprehensive
visibility of industrial assets, reducing ‘noise’ caused by high
volumes of false-positives and irrelevant OT security alerts,
prioritizing the mitigation of industrial cybersecurity risks based on
their context and potential impact on your business.
We have experience reducing ransomware risks and
helping companies fight phishing attempts that target thousands of
employees at hundreds of worldwide locations. Our work leads to
improving customers’ security controls to ensure their OT, IT, and
IIoT network environments are resilient against future attacks.
OTORIO has deep experience performing vulnerability and
penetration testing (‘pen testing’) for pulp and paper manufacturers.
This allows you to see how outside attackers would view your
company’s IT and operational technology (OT) networks. These
valuable tests and analyses enable us to find potential attack
scenarios and help you proactively reduce vulnerabilities. We
have years of experience helping industry manufacturers prioritize
and contextualize risks that can have the greatest impact on their
businesses.
OTORIO and ANDRITZ help safeguard your operations
ANDRITZ helps its global pulp and paper customers
minimize digital and cyber risks through its partnership with
industry-leading OT security provider OTORIO. Founded by leading
OT cybersecurity experts, OTORIO’s portfolio of industrial-native
cybersecurity solutions ensures continuous digital risk management
and compliance. These solutions are now fully integrated into the
ANDRITZ Automation & Digitalization portfolio, providing customers
with safer machines and a significantly more resilient infrastructure
In a multi-generational, constantly changing threat
environment, customized OT cybersecurity measures are an
imperative part of the automation development process. That is why
ANDRITZ embeds OTORIO’s innovative solutions in its marketleading solutions and services, ensuring that every pulp and paper
machine meets the highest cybersecurity standards.
77

Paperturn flipbook system