Preparing the Manufacturing Industry for New Age Cyber Attacks

[Music] hello and good afternoon thanks for joining us today for an exciting and immersive discussion on preparing the manufacturing industry for New Age cyber attacks my name is shami Goos I'm assistant editor at eiso and I'm honored to be your host and moderator for today now why the biggest fear of cyber attacks up until now was compromised sensitive data recent uh targeted attacks on Suzuki motorcycles in May last year uh that brought production to a grinding Hal actually showed us exactly just how devastating cyber attacks on manufacturing firms can be globally of course we've seen

billion dollar companies such as Nvidia uh the chip manufacturer M uh Colonial pipeline adversely impacted by cyber attacks now to discuss in depth the complexities of managing cyber security in the manufacturing sector allow me to welcome my co-presenter for the day amol Asher amol thank you so much for joining us hi well amol is the product leader for endpoint Security Solutions at seite uh seite is the Enterprise arm of with Technologies uh and amol has held product evangelist rols for more than two decades at heavy weights such as JP Morgan Chase and Cisco again two

organizations that take their cyber security very seriously now in today's discussion ladies and gentlemen we'll be looking at the latest cyber threats affecting the manufacturing industry challenges specific to the industry and of course practical strategies to strengthen your organization's cyber security defenses so without further Ado let me hand it over to amol amol uh tell us a little bit about cyber security in the manufacturing space and how SE looks at it and what you bring to the table thanks a lot Swami for that kind introduction and it's definitely a privilege to be here and connecting

with all of you uh so we did allude to the fact that uh the cyber attacks are actually on the rice globally uh not only on the uh manufacturing but several other Industries right but today we'll specifically look at how it impacts manufacturing industry and how we want to prepare ourselves in order to tackle to this Menace okay uh securite is uh the Enterprise uh Solutions um for quickill Technologies most of you have heard quickill Technologies in the past which has been an uh Forefront uh of the antivirus uh consumer antivirus uh uh for about

three decades now uh we um kind of started off with the Enterprise um about about 7 to 8 years ago and we do have host of solutions available in the Enterprise security as well right but as you can see on screen right even though we call ourselves as an Indian brand we definitely are present globally as well uh while all of our uh Solutions uh that are bagged by the largest malware lab that we have in housee right and we do have about thousand plus cyber Security Experts that are working with our company uh our

Solutions are uh definitely uh at the Forefront by saying that we are making India uh uh and uh we also have are rated as 4.7 on the G have insides uh our antivirus or the endpoint protection solution is awarded uh uh top product of the Year by the AV tast as well one interesting fact that I would like to share is that we are also the first Indian company uh that is working with the nest as in collab in collaboration for the classification project that they have started off we can move on right so now

when we do look at the cyber security or the threat landscape globally the numbers look humongous right but if we want to kind of just narrow our Focus for a minute and say that how does it affect the manufacturing Industries right so there are some of these numbers that you see on screen right so almost four out of 10 manufacturers today definitely when surveyed uh respond back saying that they do have incident cyber incidents or attacks happening uh on their infrastructure every year right so that and that's a huge number globally if you uh look

at it this means that about 10% of cyber incidents that are happening are happening on on the manufacturing Industries and as you can see the the answer somewhere spoofing spear fishing and these are increasing um multifold every year right and just the way we are prepping ourselves for fighting this minus uh hackers uh are also kind of uplifting upskilling themselves in order to kind of create and uh come out with different ways of creating issues or challenges for us right as you can see some of the indust is uh like some of the challenges that

we have seen are the uh origination of the attacks that are happening as you can see at the bottom of the screen almost 87% are result of unauthorized taxes 86% are also resulting into operational disruptions right and almost 85% are actually losing their intellectual property or the data leakage that is happening around it so this menas when you get attacked right the amount of uh challenges uh that you face are actually humongous you are not u mean it's it's not that you can cure it later you have to be prepared for it so that it

doesn't happen right average Financial impact if you really want to look at it that is almost 7.5 uh million that is uh just for the manufacturing industry and we are not even looking at uh the global number just yet now um you know just just before we proceed as see we've got a lot of participants who are whove already joined in and uh you know more are joining in at this point you know let's do a quick dip check you know just to understand uh uh the kind of people that you know that have joined

us for the webinar today um with a quick poll we just like to get a read on the audience and the profiles that uh you guys are uh involved in can we take a quick Poll for that all right folks I mean that's just a quick poll this essentially to uh help us gauge uh you know the profiles of the audience that we're going to be dealing with and that is going to help us uh you know tailor the discussion according to the uh you know audience that we have so take a bit I mean

uh just choose the profile out here and this is for basically our own understanding so you know we can engage with you in a better manner all right so uh you've got a good mix and match out here am we see a lot of CIO and cesos uh as well as you know it and security heads so the audience is right up your alley go ahead please wonderful yeah we we got the decision makers and the people that are responsible and accountable for managing security that's that's wonderful now we did look at uh the incidents

uh that are happening in the industry and specifically in the manufacturing industry some of these incidents that have happened over the last five or 10 years right but these would be definitely relevant and definitely something that you can relate to because some of these companies that you see uh these are actually from various different uh types of manufacturing companies right Colonial pipeline which is an oil uh oil and gas company that got breached even though their networks it and OT were separated out and the breach actually happened on an IT network but they still end

up ended up having their OT Network shut down and that shut down was for about 8 Days Ral Nissan went through a similar attack ransomware attacked uh that also impacted uh them heavily where uh they had to shut down a couple of plants in order to kind of take care of and remove these Ransom bears from the affected systems and when you look at it there is no one company that you can single out and say that this particular industry is attacked more of or less right this pretty much says that almost everyone is vulnerable

and we always need to be on our TOS in order to prepare ourselves to look at how do we keep uh one step ahead of the threat actors one that I would specifically want to mention here is the advant right this is actually an it or the chip manufacturing company that also got attack uh with the ransomes now when you look at these companies and when you want to reflect on these you definitely want to see what are the consequences of these breaches that are happening on my organization right it's it's definitely an revenue and

the reputation loss that we are looking at but we also are definitely worried about the disruption of the operations that are something that we are handling right revenue and reputation laws is something that is external that people are seeing uh about our company whereas internally when such incidents happen we have to kind of end of Burn the Midnight Oil in order to get out of this situation so disruption of operation loss of intellectual property the host of other things um that actually result into um because of these incidents that are happening if I can just

quickly move on um so late last year in the month of December along with the data security Council of India um secur did launch an India cyber threat report 2023 um this is to kind of an um a collaboration that we had with DC where we wanted to Showcase to everyone within India that what is happening that is specific to India right whenever we look at threat reports that are being done by the global companies uh outside you will see that is predominantly getting um focused around what happens in us or in the Europe at

most whereas comparatively the footprint of these happenings in India is very less so sometimes it kind of gets diluted as a noise in the bigger picture so we wanted to kind of bring this report out and let everyone within India know that what is happening specifically India and where we need to actually put our money and put our efforts in order to safeguard ourselves so as you can see about 9 million endpoints that we have under management with us right we are seeing almost 400 million plus detections in a year so try and do the

math right that's almost like 10 detections of year for each you you look at the number of detections permit about 761 detections per minut so these are not actually the incidents you can look at it these are the detections that are happening these are like the attempts that we were able to catch when these are actually happening uh you could see that one incident per 38,000 detections that are happening are related to other Mark almost One Security incident per 60 650 detections that are specifically for an while we looked at the previous slide that talked

about 10% security incidents are happening in the manufacturing industry but when it comes to India that number is actually 20% so manufacturing industry within India is actually getting attacked more than their Global uh peers or Global competitors right so we need to want our toes much more than them exactly yeah Android devices right we do use that in all our life not only in the personal life but also the professional life lot of our work that we do for the organizations is also getting carried from the Android or the Apple handsets and th those are

also getting attacked these one of the things that we did see uh that is happening specifically in the manufacturing industry was something named as tet. right and this particular malware actually what happens is it kind of creates a link to itself uh and kind of makes you feel that you should be able to access and legitimate file by clicking this link and then it actually opens up an malicious code and then starts accessing the uh command and control server so and so this actually becomes very benign u meaning you feel like you're actually doing a

right thing but you actually get fooled or spoofed into doing certain things right and that's actually very rampant and the high number of incidents were related to this particular map where right um am we got a quick question from sain aaral who's just wanting were these detections done by seite you know the numbers that you've pulled up here it was based on what seite research observe so the number of detections that we see these are actually done by uh securite uh these are also the um from the 9 million endpoints that we have under management

with us so this is from the Telemetry that we have ga gathered from that those end points is what this is based on this is apart from the U monitoring that we do uh on the deep and dark web right so this is different than what we have done here but this is definitely from our own Telemetry that we have uh it'll be interesting to know what kind of challenges are uh you know are are these manufacturing firms facing when it comes to handling cber incidents so at this point in time I I would like

to kind of before we move into what kind of challenges does the industry look into right so I would just want to kind of request for a short pool uh and try and understand uh from the leaders that we have on call as to what are the challenges that they see right while talking to multiple people in the industry we realize that these are the four top challenges that they describe to us right but would like to know from the audience today as to what what do they see as a top challenge so if you

can bring up that PO please sure let's let's quickly have that PO I think it's going to be a very interesting pool and we'd love to know what the audience thinks of this so folks what are your top challenges in implementing cyber security at the organization uh straightforward four options out here data s security threats institution employee skills and knowledge or insufficient cooperation between it and O you know one of the things that uh was interesting in what you actually pulled up am is uh the list of companies that were targeted by these cyber attacks

these are all Fortune 500 companies that' got they spend billions of dollars in it and security spending and yet they not immune to uh you know targeted cyber attacks so it it is not about we having the Solutions in place right we also need to ensure that Solutions are kept up toate and we are constantly monitoring it we also need just like we need to ensure that we have the right uh vulnerabilities caught and mitigated we also need to be on our to while hackers are continuously identifying new vulnerabilities and exploiting it we also need

to ensure that we are also on our toes and identifying some of these things ourselves and plugging those holes before the tax right right okay so I think we got a fairly good read out here okay we can end this poll and uh let me ask our backing team to quickly display the results for this I think this is something that we really really like to see and uh we like the audience also to share what we see out there so that's neck and neck right almost all of these are like top challenges you can't

choose one correct there not a complete clear majority but then of course insufficient employees skills and knowledge uh that's across the board uh cber security threats and uh you know data of course uh ability to collect properly analyze and ensure is you know are you seeing a pattern out here is that is there some kind of an indication that the itot convergence is actually making things more complicated uh for the manufacturing space sorry can you come again s uh so you know the data the ability to properly collect uh data and analyze it you know

are some of these complexities arising due to the I convergence uh that's going on in the manufacturing space it's it definitely is and I think in the subsequent slide we'll definitely talk about it uh okay like to kind of move on uh okay great all right all right thanks for that PO why talk to the uh industry experts right so these are some of the things that um we have been hearing a lot right almost that is U happening in the manufacturing industry the complexity of it and OT conversions right uh that we just talked

about now the thinking is that earlier uh there was a clear separation between it and OT there wasn't clear separation that talked about that both our it systems and OT systems were air gabbed up means they had no internet connectivity whatsoever but over time what has started happening is these are being managed by two separate teams and the Advent of cloud or the proliferation of the cloud made sure that almost everyone is reaching to the cloud in a controlled fashion but everyone is reaching to the cloud that means everyone is reaching to the internet there

are the boundaries that we had between it and OT networks are blurring at some places you can't really Define the boundary as well right some of the Telemetry that actually comes out of OT systems actually also resides on the it Network for you to do further an there were instances of rans attacks wherein though the OT networks were not uh attacked the data that was collected from the OT Network that Telemetry was something that was attacked on the it systems and wiped out or stolen right so such attacks is something that we need to be

worried about now the challenge that we see is what is something that is an operational network is actually headed by a different team whereas the it systems are headed by a different team more often than not we have seen and people do keep talking about this is there is no Synergy between these two um because of what operational silos that we do have but it actually creates a lot of uh friction and it also creates a lot of um holes in the uh infrastructure for the hackers to C typically what we have seen on the

it side is you will see that the it systems are actually getting updated pretty frequently whereas the systems um actually don't get updated that frequ the update Paradox right meaning you need to identify these certain uh end of life or certain old and dated uh systems and also keep them updated it systems do that that is probably because vendors are also providing you more updates whereas on the OT systems that is not so frequent where the vendors are not providing you that frequent updates plus uh we are also little lacks in updating those uh vulnerabilities

in the networks as well right so we saying that something that we have on the system or the infrastructure doesn't mean that we are actually securing it we need to constantly monitor it constantly identify the holes in it and constantly start plugging those H into legaly systems right as we just talked about the uh update uh Paradox uh there's so many legaly systems even on the it side we do see some of our customers that are still using Windows 7 Windows xp2 right and some of those customers are actually asking us to saying that continue

to support Windows XP which Microsoft itself has done end of life uh many many years ago right so we need to actually move on and ensure that it's not that we can keep them aside and if we are able to keep them aside probably no one is going to be able to use that also right so we need to kind of upskill ourselves we need to kind of ensure that our systems are upgraded applications are moved from one uh legales systems to the uh uh supported system so that you have an constant upkeep on all

of these uh applications and the systems as well if I can move a little further you will often see that on the OT side and even on the it System earlier it used to be the case that there were many U vendors that would come out with the proprietary communication protocols and these being the communication protocols that are propri there are not going to be many vendors that are kind of developing for it and showing the compatibility right so it means that you will have if those systems get attacked right you are actually not having

a way out in order to plug those uh hes and move on right you have to wait for the specific to go go kind of plug those holes for you there are very limited wetting processes when we are talking about a single vendor proprietary information so almost the world is now moving to standardized procedures standardized the communication protocols that are utilized by multiple vendors that are utilized by multiple customers and you can always identify the issues with it and you will Al available that everyone is pitching in in order to plug these holes as well

there are lot of operational constraints that we have right there are probably software updates that are not going to be possible because of the proprietary nature of the products mean some of the products are so proprietary you'll not be able to get the uh updates from them likely because those softwares are end of life or the companies are no more or you continue to use that software because of a certain functionality that no other new application vendor is giving one interesting thing that I can talk about at this point in time is uh while we

do have endpoint detection and response on the it side we cannot use a similar uh technology on the OT uh networks because uh ICS and these Cara devices cannot actually have an appoint that is running on it that can collect all this Telemetry or information that can be sent back so all you can do is actually just manage or monitor the traffic that is happening through these uh OT networks pump that into your xdr and then try to kind of uh uh build a analytics on top of it to identify certain challenges that may be

there on the infrastructure so these are several concerns that we have around uh the manufacturing industry specifically uh now if if I can on so what you see on screen is kind of a rehash that we have seen But simplified because whenever we talk to uh the c or cios from the industry they do say some of these things that are outlined here right uh the biggest worry that they have is the operational disruption they do not want to have any operational disruption because that is directly linked with the uh Revenue similarly and that means

that we have zero tolerance for the down similarly we all want to safeguard our uh intellectual property now whether it's a case of you having Insider threats that means some of the internal folks actually leaking your information or the uh cyber Espionage happening where they are actually extracting this information and sharing or leaking it to the open marketpl for somebody to buy it or somebody is getting contract to Espino uh and get these details out of your company as well but all this put together right we feel that security is probably the responsibility of the

uh it organization or the security organization within the company not for each and every tion and that is where we do see lack of awareness and lack of skilled Workforce is the biggest challenge that each and every organization whereas everyone needs responsible for security right everyone needs to feel and think twice before they open or click on any link so this is what um we need to constantly keep running u meaning I have seen some of the organizations where cesos are actually running the programs every month with specific departments to say that this is how

you need to safeguard yourselves not only on the corporate information but how do you keep safe even on the personal side as well right the moment you kind of merge these two things together people start believing and people start understanding the repercussions of not having security or not worrying about the security uh we also need to also look at the supply chain vulnerabilities most of us do work with the customer customers to whom we are suppliers and most of us definitely have suppliers of our own not necessarily the attack actually originates on our Network directly

it actually moves laterally from your customer or from your supplier as well right so while we definitely are accountable for our own uh security but we also need to ensure that whom we are working with they also following the proper NS and actually having proper security deployed at their end as well I think that's a great point because you know in large manufacturing organizations you could have hundreds of links in the supply chain and uh you know uh cyber security again is a shared responsibility right so we at secate uh what we have done is

we came out with this framework and we called this as an zero trust security integrated uh solution Suite that we have at the base of it what we have is the uh cite Labs uh that is the uh platform on which we are actually building uh the Telemetry that we are collecting from all the end points is actually uh feeding into all of our Solutions and improving our Solutions day by day multiple times s day right but on top of it we do have zero trust access uh we do have zero trust unified endpoint where

we do save the end points the uh systems like desktop servers and uh laptops uh we do have a separate solution just to manage the mobile endpoints we do have an xdr solution of our own and also the data privacy with the data privacy Bill uh that is already pass and now uh likely to be enacted uh and operationalized in the next year post elections we would also be seeing that lot of us wanting to know how do we Safeguard our data how do we ensure the privacy of our data first thing in that is

identifying where the data is Right many of you may have already started the work where you also want to understand where all of your data lies and where it needs to be secure because most of the challenges that that you have seen probably on the it system is many of us do not know how many unmanaged or how many unknown endpoints are the uh devices that we have on the network every time we have done an Discovery uh for the customers in past 20 years I have seen customers have always encountered anywhere between 10 to

15% of infrastructure devices be it laptops routers firewalls whatever it may be that are not known to them because they fell through the cracks right through the Excel sheets through the cmdb data it always kind of fell through the cracks and nobody knew their existence unless somebody went and discovered it while we have these Solutions we also have something called as an Hawkeye that is our Central Security Management a single pane of glass that actually gets you into all of these products that work together as an and gives you an integrated solution so at this

point in time I think uh we can open it up for the Q&A sure we've got we've got quite a few questions uh coming in so uh audience uh you know you've seen a lot of positive response coming in from the audience and I would request you to throw in as many questions as you can there's a very pertinent topic and uh you know I'm sure amol will be more than happy to uh assist you with it uh amol we had a quick question from one of our participants out here YF Hashi who's asking if

the presentation is going to be shared um if not the presentation can you share some of the resources and Links at a later point in time during the webinar oh sorry I didn't get that question uh so he's asking whether the presentation can be shared uh so Yousef uh I'm not sure the presentation can be shared but then what am will be doing is he's going to be sharing a bunch of resources and URLs uh in the chat window that you can actually use a lot of these points from the presentation were taken from those

resources you can utilize those we defitely sharing the threat report that we have published alongside dsci that is something we'll be sharing with you all U and uh the other stuff with regards to how do we find more information about the portfolio that we okay uh we've got a very simple question coming from suchin agal sounds simple but I'm not too sure whether it's actually that simple how are you protecting OT uh if you could tell us you know seit approach towards OT so we we are not currently securing OT networks um that is something

we are yet to jump into uh what we have seen uh while we talk to the um the cesos and the companies is that they do want to keep multiple vendors that are securing different sections of their networks they do not want to keep the same vendor that is doing the security in the it systems we have seen them where they want to keep the endpoint security separate from the server security similarly we are seeing um cesos or the companies actually wanting to keep the OT security separate from the uh endpoint security so on OT

security is something that we haven't made a for into that is something we definitely looking so currently we are only uh providing security to the it understood uh we've got Prine Lloyd dusza who's asking us how secure how how securite antivirus works is it Windows is Windows Server required or uh would it be okay on a normal server well uh so I I'll I I'll kind of try and answer two things from here right as part of the uh security the antivirus can be deployed on both the regular desktops which can be a server or

can be an endpoint whereas the on premises solution if you want to deploy that can be deployed either again on the uh Windows Server Os or on the desktop o uh we do do have an uh a big footprint in the SMB uh Market wherein most of our customers are not want on server OS they continue to deploy it on the desktop as but the more number of endpoints that you will have to cater to it's good to have an operating system that is server class deployed on a proper server Hardware that gives you better

benefit okay you've got tar who's asking us you know how do you solve uh Windows vulnerabilities and applications uh what's your approach that so there are two ways to look at it one is um constantly keep scanning for the vulnerabilities window we do have an vulnerability scan option within our own solution so that allows you to kind of keep scanning for the uh systems and that is also integrated with our own patch management solution that helps you map and and identify these batches that need to be deployed for these V right now am you know

just as a followup to that particular question uh is is you know OT uh I mean is is ICS vulnerability is also looked at the same way as we I vulnerabilities because every now and then we keep seeing you know scata vulnerabilities popping up and ICS vulnerabilities again is is a huge concern uh what are your thoughts about it and what would you recommend cesos how do you go about uh the update Paradox that you had covered in your BD it it is actually very difficult on the OT networks yet uh unlike it systems the

uh even though the number of vulnerabilities that are getting uh identified on the OT side is actually increasing day by day we do not see that the similar response is coming from the vendors where they are actually releasing the patches also uh in the similar frequency right so but that side I'm also seeing that they're definitely upping the ante and ensuring that the updates also getting released but it is still not comparable to what we see on the it screen underst uh am you've got some really good you know positive signs from our questions coming

in here you have a lot of questions about site and what they can do for that security so we have M manohar who's asking us uh in which area site more dominated is it in the banking it or the manufacturing space and also how you looking at at you know organizations with over 5,000 end users so we we are definitely more into manufacturing Logistics uh we do have a lot of bfsi customers uh but that to in the non nbfcs not in the regular banking sectors we do have some of the Cooperative Banks as are

customers uh so it's it's pretty mix um so but at a very high level I can say manufacturing is definitely uh the section that we do largely serve U I think the second question was with regards to if if you can just remind me that large scale organizations you know where you have over 5,000 end users yeah so we we did start looking at um even though we were the market leaders for the smvs up to 500 2,000 end points is something that we are the market leaders into endpoint security uh up to 5,000 we

do see ourselves uh moving up while our market share is about 45% in the SMB our market share is actually increasing in the med Market uh we have recently about six months ago we also launched an Onis solution that can cater to more than 5,000 OD points and we do have several cust customers that are Beyond 25k end points that are running the systems uh and the security for their endp points but most of our customers that we see uh in the uh in and around 5,000k end points are actually utilizing our EPS Cloud offer

rather than the on premises we do see on premises getting utilized mostly in the governments or in the uh bfsi but almost everybody else is pretty much open for adopting the cloud endpoint secur understood uh I'm just curious you know what is your approach to uh uh you know securing organizations or partnering with organizations where they have uh challenges with respect to Legacy infra uh is that a work around uh how do you how do you see the problem how do you tackle it so we have been supporting these Legacy systems so it's not that

the software actually discards these Lego Systems and stops uh support for them but what happens is with the changes let's say if we are talking about Windows XP or Windows 7 right since the Windows Microsoft itself has done an end of life and not releasing any security patches on it uh that means it gets really hard to kind of Safeguard them with the latest sets that are out there so we do try to keep ourselves as much as possible we try to provide security to it because we still do have a larger portion that is

using the Legacy systems and some of our customers even though they are in the pipeline of uh upgrading these systems to the L side but we do understand they also have similar challenges where they do not have similar support from their application vendors there where they can move their applications also to the plers as they move to the SAS applications and then they discontinue their legaly OES till that time we do support them with the uh with the antivirus but the challenge there is the amount of security that you can have is comparatively lesser uh

than the uh latest Windows 10 or Windows right uh but I've got one interesting link out here uh that I would want uh our coordinators to share with the audience and this is the uh this is the URL to the India cyber threat report uh which I think the audience would love to go through and download uh for their understanding I just I'm going to share the uh Link in just a bit in the meantime we've got another question from uh m n who's asking us how do you evaluate across impacts of updates pertaining to

it and OT systems um so I believe you know what he's asking out here is that you know you do perform these updates how do you evaluate uh the security or how do you evaluate the benefits uh at a lat point in time how do you gauge the security the resilience of these updates at dat point so usually companies do provide updates and every time they provide an update they also give you an criticality of certain update certain updates that are very critical security updates will be provided not only by the OS U vendors but

also by the application vendors and they'll also be giving you the CV number or the kit cality of the vulnerability uh that is actually getting plugged by these updates right so you also need to kind of evaluate that across your own infrastructure and figure out whether even though you're using certain application are you using that particular functionality of the application or not is that functionality turned on or not whether you're specifically using the protocol or not you might be using the protocol but not the specific codes right so you you need to kind of do

an evaluation of your own and decide what kind of updates need to go in first compared to the other updates because almost every day I do understand that the amount of OS updates that we need to uh push to the infrastructure because of the OS vendors that are giving it and also say various different application vendors are also releasing patches every now and then doing that on the infrastructure is very time consuming and combersome um many customers have moved on to the uh SAS application specifically also for this reason because plugging these vulnerabilities on the

SAS applications is actually also transferred to the application me the moment they have identified the vulnerability they fix it on the application themselves and that is where you will actually see that as an customer you don't have to worry about certain vulnera right um we have a question coming from pal not too sure if it's relevant but then you know you just possibly take it since it pertains to uh malware so PA was asking us uh if bot malware shares personal information publicly uh is that something that you know our security PR should be worried

about so it actually depends on uh Bots there are some of the Bots that are defined and identified as malicious and there are certain BS that are not identified as malicious or probably known as safe uh Bots right if the Bots are deployed by your own company you definitely know what it is gathering and what is it and how it is sharing it whereas you definitely need to use some of these Bots into your control environment or the sandbox and identify the behavior look at the behavior and decide whether you want to have those bots

in the system so you can pretty much uh block all the Bots and then zero trust security actually talks about that where you start with clean slate where nothing is approved or nothing is allowed and then you start up things on a need basis understood uh we've got a very interesting question coming from equation and V uh but before I get our uh I would want our audience to actually check out the link that uh was just put up byc so.com so folks this is the uh link to the India cyber threat report 2023 I

think uh you're going to find a lot of useful insights out here it gives you a pretty good picture from uh you know sect research point of view so this is one resource that you would want to have in your K go ahead click this and then download the resource uh give it a look in your free time okay coming back to the question that we had from Krishnan B so Krishnan is asking us industry 4.0 adoption in a highspeed uh environment in India what are the preliminary checkpoints to manage smooth industry 4.0 implementations so

what do you think cios and cesos should do today uh to ensure that you know they are easily able to uh welcome industry 4.0 as part of Industry 4.0 it it talks about all the connected it and OT systems right and some of these also getting touted as Smart Industries and where the pitfall lies is it needs an integrated play from the company rather than Silo approach so understand and we need to get in leadership bind uh in everyone understands that we need to do this together it cannot be done in silence right and once

everyone adopts to that philosophy first right then it gets easier afterwards but you as an ciso or a CIO will not be able to drive industry4.0 unless you get a buy from the business owners as well right another quick question from prakash hona who's asking us OT comes with Hardware connected with controllers uh any update on OS or security does it impact machine controllers um and you know controller upgradation is very costly what's your take on this some of the meaning I I do understand not necessarily all the updates are going to be possible software

updates are easily available for you to update whereas the hardware updates are not easily available there are times when manufacturers recall some of the hardware and uh give you a replacement for that uh in the dire situations where it's actually a big impact uh situation where they provide you that kind of an upgrade also another question from moan Babu who's asking us how do you secured iot devices used in manufacturing Industries so um if you could tell us a little bit about you know the Advent of iot iot uh what do you think are uh

you know the most important things that cesos must focus on uh to ensure that they don't have challenges with I iot or iot tomorrow see iot sensors are actually very low latency devices right and they come they do their work they come online they do their work they pass on the information and they kind of go to sleep or uh kind of shut themselves down right uh so while we have these sensors uh we need to constantly monitor the traffic that is reaching to their controllers and that you're actually monitoring them and putting analytics on

top of it well you know I I really wish that we had more time uh to discuss this topic because our audience somehow just loves uh the topic and we see a lot of lot of questions coming in but uh before we get there you know uh we know that you know you have a lot of questions for seite and uh I'm sure would be more than happy to get in touch with you and Beth your questions uh but then we have a quick Poll for you if you could just let us know um you

know if if and how would you want s to contact you uh so so we get an understanding of you know what you're looking for and uh how SEC can go about it so um can we have a quick poll out here please let's get a quick read from the audience okay so you got a lot of portfolios out here uh it would be interesting to know what your audience really wants in the meantime am if you could tell us you know your conversations with cios and cesos in the manufacturing space what seems to be

their biggest concern uh uh what kind of products are they looking for from seite what are they what are the most of the questions around the biggest T that I have seen from the folks is uh they they want want some way to kind of get these it and the elementary together and be able to analyze on top of it uh there are no single vendors that are going to give you that ability so and there are no single vendor that works on both it and OT systems as well right so it actually now and

unforunately on the customers to understand what is it the value that they can bring by getting this El together into their Sim or an HDR solution and how do we churn out an actionable Insight on top of it all right second that they ask us also to help them with is uh the employee awareness uh because uh the uh people that you that use OT systems according to them these are these are not Technologies or non-technical people that's what the general belief is which I personally don't belong to but they do see that those folks

may not probably understand security and that's why they do not understand the repercussions of uh not doing it properly so we do conduct several sessions with them wherein we sensitize each and everyone within the organization and also help people Define what kind of an program needs to be run with their organization so that you not only help your employees understand the security within the uh company and aution but also how do we uh how do you ensure yourself to be secure even personally on the digital world right so these are things that are definitely top

of mind for the isus awareness is one big challenge that everyone has to go through uh and there is not uh enough uh uh enough training that we can do right we have to constantly keep doing it because just the way you see um new threats coming up and new vulnerabilities getting blocked similarly you have to keep letting your employees know everything that they need to know about the security and it's a constant training that has to happen right right now am I was just uh you know looking at the last four results of course

you know we won't uh be sharing more most of the numbers out here but then I see a lot of interest towards uh zna uh am if you could tell us you know what is Z's approach to ztna and typically I mean uh does the ztna approach to itot convergence need to be different from the way we approach zna for normal it systems uh so when we talk about ztna on the securite side we do look at it from two angles one is how do you secure your users and how do you secure your applications

on networks right so while securing your users it's about giving them the right access at the right levels to your applications be it on your uh infrastructure or be it on the uh Shadow it right so it's like giving your employees contractors the right amount of access at the right levels whereas uh zero trust network access gtna that is talking about giving the application security that talks about how do you stop the lateral how do you ensure that programmable access is also given the similar thought process and also control at the same levels so that's

how we differentiate between the user access and the network access now for the OTS we haven't thought through that yet completely as how do we provide the zero trust access uh for the op sensors uh that is something still on the design board for us all right all right uh I've got a quick you know interesting question from saan bua who's was asking are you aware of any framework being uh framed or you know uh being implemented or designed specifically for OT environments that can help protect uh it in the view of cyber security so

we have it Frameworks we've got a lot of you know spoke about the N framework Etc is this something that we have for OT as well at this point no so we we do not have a solution for the OT at this point in time so several of our customers want us to for into that we started uh discussions around it but nothing concrete yet for me to share with the larger Forum all right another topic that keeps coming up in security conversations these days is of course uh endpoint security and uh we have rage

who's asking us does site have a solution which doesn't require a server uh and uses Edge Computing methods for endpoint security so we we do uh we do are looking at security where for the cloud workloads where you don't have to really go deploy it uh on on on the servers meaning serverless security is what we talking about we are definitely working on it and we'll soon be happy to kind of publish that to the larger world as to how we are resolving that for the industry understood all right well uh we still getting more

questions which is of course a positive sign but then I think uh we've kind of you know got a brief of all the questions and in some form of the other we've kind of addressed most of the questions that our audience has posed here today um am some parting thoughts on you know what what are some of the reactions that you saw from our audience the questions that was coming from them um there seems to be a lot of you know curiosity of course I'm ipot um you know what's secure I mean what's SEC going

to be focusing on in 2024 and Beyond uh to Future proof Security in uh iot envirment so looking at the questions that um we answered today right the mix of both right while people are definitely looking at how to secure it systems but there are a lot of questions about what is it that the securitize cigarette is doing for the OT as well so that is kind of a push to us because why we talk to our customers they also reminding us that we need to make a 4 into security so this is kind of

an reminder was that yes that is definitely an industry ask of us that we need to make a 4 into security uh secondly uh while we look at the security on uh uh for the upcoming years the first and foremost thing that is top of our mind right now is how do we add uh more Ai and machine learning so that we do the detections much faster right so while we are continuously doing it we do have an go deep. AI as in AI umbrella under which we do have lot of machine learning algorithms that

do run for the detections but as the hackers and the threat actors are utilizing AI to define the threat vectors Define the uh malw and ransomwares right so we are also wanting to uh strengthen our uh response to it utilizing yeah so that is going to be top of our mind for this all right all right sounds good well uh you know this is going to be um a developing space and of course as uh as an observer of cyber security this is going to be a keen area of focus for me as well in

the coming year and of course for am with you know sees focus on OT security so folks I mean that's pretty much all that we had time for today uh thank you for being a wonderful audience you've shared a lot of questions with us you've been very uh participative with your polls uh and yeah it was it was a great discuss discussion uh with amol amol thanks again uh for your time thanks again for sharing your expertise and your observations with us um all right well that's where we leave off at this point in time

so folks thanks so much for joining us again uh that was amol ashar from setre and this is shamik Bush signing off from Udo thanks and have a wonderful week ahead thank you all have a wonderful day thanks byebye [Music]