Going safely into the brave new world of 4IR

1 August 2019 Industrial (Industry), Information Security

The Fourth Industrial Revolution (4IR) is changing the world as we know it, and South Africa is pinning its growth ambitions on a 4IR-enabled economy. But 4IR adoption without putting cyber-safety first could undermine growth efforts and expand the risks to manufacturing, heavy industry and key infrastructure, warns GECI.

GECI, a specialist in industrial cybersecurity, says key infrastructure, manufacturing and heavy industry are potentially at greater cyber-risk than knowledge-based enterprises.

“Industries such as finance, telecoms, healthcare and retail are typically mature in terms of the digitisation journey, and usually have advanced and comprehensive cybersecurity measures in place,” says Mike Bergen, director of GECI International: Middle East and Africa. “In contrast, industrial and key infrastructure facilities are often running older operations technologies (OT) in siloes and not connected to the organisations’ IT systems.

“For years, they have been at limited risk of cyber-attack. However, as they digitise and start moving into a 4IR environment, these OTs will become connected to the Internet and integrated into the enterprise IT environment, quickly expanding their risk exposure.”

This risk is compounded by the fact that industrial sites tend to neglect basic information security measures in their existing environments. International OT cybersecurity solutions developer CyberX’s 2019 Global ICS & IIoT Risk Report found vulnerabilities and flaws in basic cybersecurity at industrial sites around the world:

* 53% of industrial sites used outdated Windows systems.

* 57% were not running anti-virus software that updated signatures automatically.

* 69% had passwords traversing the network in plain-text.

* The ‘air gap’ is a myth, as 40% of industrial sites had at least one direct connection to the Internet.

* 84% had at least one remotely accessible device.

* 16% of sites had at least one wireless access point.

Cyber criminals are already exploiting these vulnerabilities, costing companies millions in ransoms and other damages, Bergen says. “Research has found that virtually all industrial organisations have come under some form of cyber-attack in the past few years. These attacks range from malware and ransomware attacks to targeted attacks designed to sabotage operations or steal sensitive data.

“The losses caused by successful attacks extend from actual theft and ransoms, through to production downtime, safety risks, reputational damage and potential fines in the event of a failure to deliver critical services or due to sensitive information breaches.”

The more connected these organisations become, the greater their risk footprint. However, this does not mean the industrial sector should not advance into the 4IR. Bergen says: “Digitisation and technological progress helps overcome several common challenges in the industrial and manufacturing sectors – it improves throughput, efficiency and profitability, by achieving performance enhancement and resource efficiency through data acquisition and real-time analytics.

“Improved efficiencies help free up investment funds to support modern manufacturing innovation, rapid product iteration and customisation. Importantly, industrial safety can be enhanced by technologies such as better analytics and automation of dangerous tasks through robotics, cobotics and the digital workforce.”

He cites a McKinsey September 2018 white paper, which found “manufacturing digitisation could boost heavy industry profit margins by three to five points”.

Says Bergen: “Nobody can afford to ignore 4IR progress. But companies wishing to move into the 4IR have to build cybersecurity into their strategies and systems from the ground up in both IT and OT environments, to counter the growing cyber-risks facing them.”

GECI provides CyberX in South Africa. The CyberX solution delivers an industrial cybersecurity platform built by blue-team military cyber-experts with nation-state expertise defending critical infrastructure. CyberX delivers advanced OT asset discovery and visualisation, detects vulnerabilities and advanced known and unknown threats within seconds, prioritises and recommends actions to be taken to rectify vulnerabilities and threats, monitors continuously, providing alerts in real time, protecting critical IT and OT infrastructure against cyber-attacks, and automating Security Operations Centre (SOC) workflows.





Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Data resilience at VeeamON
Technews Publishing SMART Security Solutions Infrastructure Information Security
SMART Security Solutions attended the VeeamON Tour in Johannesburg in August to learn more about data resilience and Veeam’s initiatives to enhance data protection, both on-site and in the cloud.

Read more...
Secure data protection without hardware lock-in
Infrastructure Information Security News & Events
New Veeam Software Appliance empowers IT teams to achieve instant protection with Veeam’s fully preconfigured, software-only appliance, delivering enterprise-ready simplified deployment and operational efficiency, robust cyber resilience.

Read more...
Layered security for complex spaces
Regal Security Distributors SA Integrated Solutions Industrial (Industry) Commercial (Industry)
The positive impact of loss prevention and risk management on the bottom line is far more than just a number; it means that assets are physically secure, insurance premiums remain low, and people are protected.

Read more...
The growing role of hybrid backup
Infrastructure Information Security
As Africa’s digital economy rapidly grows, businesses across the continent are facing the challenge of securing data in an environment characterised by evolving cyberthreats, unreliable connectivity and diverse regulatory frameworks.

Read more...
Choicejacking bypasses smartphone charging security
News & Events Information Security
Choicejacking is a new cyberthreat that bypasses smartphone charging security defences to confirm, without the victim’s input or consent, that the victim wishes to connect in data-transfer mode.

Read more...
Most wanted malware
News & Events Information Security
Check Point Software Technologies unveiled its Global Threat Index for June 2025, highlighting a surge in new and evolving threats. Eight African countries are among the most targeted as malware leaders AsyncRAT and FakeUpdates expand.

Read more...
SMARTpod talks to Sophos and Phishield
SMART Security Solutions Technews Publishing Sophos Videos Information Security News & Events
SMARTpod recently spoke with Pieter Nel, Sales Director for SADC at Sophos, and Sarel Lamprecht, MD at Phishield, about ransomware and their new cyber insurance partnership.

Read more...
Cybersecurity and insurance partnership for sub-Saharan Africa
Sophos News & Events Information Security Security Services & Risk Management
Sophos and Phishield Announce first-of-its-kind cybersecurity and insurance partnership for sub-Saharan Africa. The SMARTpod podcast, discussing the deal and the state of ransomware in South Africa and globally, is now also available.

Read more...
Corporate and academic teams can register for Kaspersky contest
Kaspersky News & Events Information Security
Kaspersky has announced the registration opening for its new Kaspersky{CTF} (Capture the Flag) competition, inviting academic and corporate teams from around the globe to compete in a battle of skill, strategy and innovation.

Read more...
Continuous security optimisation.
News & Events Information Security
Cymulate has announced its partnership with SentinelOne, a threat exposure validation and AI-powered cybersecurity platform. The collaboration delivers self-healing endpoint security that empowers businesses to increase protection for every endpoint on their network.

Read more...










While every effort has been made to ensure the accuracy of the information contained herein, the publisher and its agents cannot be held responsible for any errors contained, or any loss incurred as a result. Articles published do not necessarily reflect the views of the publishers. The editor reserves the right to alter or cut copy. Articles submitted are deemed to have been cleared for publication. Advertisements and company contact details are published as provided by the advertiser. Technews Publishing (Pty) Ltd cannot be held responsible for the accuracy or veracity of supplied material.




© Technews Publishing (Pty) Ltd. | All Rights Reserved.