Devices and Infrastructure

Global map of depicting advancing in policy developments. Eleven countries have advanced critical infrastructure cybersecurity risk requirements, 2 countries have advanced cyber incident reporting requirements, and 9 countries are advancing both types of requirements.

• Multilateral institutions must be reimagined to address the pressing challenge of nation state cyberattacks.
• Develop cybersecurity policies that are consistent and interoperable across regions, sectors, and topic areas.

• Multilateral institutions must be reimagined to address the pressing challenge of nation state cyberattacks.
• Develop cybersecurity policies that are consistent and interoperable across regions, sectors, and topic areas.

• Ensure devices are robust by applying patches, changing default passwords, and default SSH ports.
• Reduce the attack surface by eliminating unnecessary internet connections and open ports, restricting remote access by blocking ports, denying remote access, and using VPN services.
• Use an IoT/OT-aware network detection and response (NDR) solution and a security information and event management (SIEM)/security orchestration and response (SOAR) solution to monitor devices for anomalous or unauthorized behaviors, such as communication with unfamiliar hosts.
• Segment networks to limit an attacker’s ability to move laterally and compromise assets after initial intrusion. IoT devices and OT networks should be isolated from corporate IT networks through firewalls.
• Ensure ICS protocols are not exposed directly to the internet.

• Gain deeper visibility into IoT/OT devices on your network and prioritize them by risk to the enterprise if they are compromised.
• Use firmware scanning tools to understand potential security weaknesses and work with vendors to identify how to mitigate the risks for high-risk devices.
• Positively influence the security of IoT/OT devices by requiring the adoption of secure development lifecycle best practices by your vendors.

• Avoid transferring files which contain system definitions through unsecure channels, or to non-essential personnel.
• When transferring such files is unavoidable, be sure to monitor activity on the network and ensure assets are secure.
• Protect engineering stations by monitoring with EDR solutions.
• Proactively conduct incident response for OT networks.
• Deploy continuous monitoring, like Defender for IoT.