The annual report of the Repository for Industrial Security Incidents (RISI) has been released by the not-for-profit Security Incidents Organization, which produces the report annually. Here's the press release from John Cusimano at SIO:
2011 REPORT ON CONTROL SYSTEM CYBER SECURITY INCIDENTS RELEASED
SELLERSVILLE, PA (April 12, 2012) - According to data in the Repository for Industrial Security Incidents (RISI) database approximately 35% of industrial control system (ICS) security incidents were initiated through remote access. Supporting this finding is RISI survey results that indicate nearly 65% of facilities allow remote access to their control systems. These findings and many more were published today in the 2011 Annual Report on Cyber Security Incidents and Trends Affecting Industrial Control Systems.
RISI is an industry-wide repository for collecting, analyzing, and sharing information regarding cyber security incidents that directly affect industrial control and supervisory control and data acquisition (SCADA) systems. Industrial automation system suppliers, end-users and international government agencies and research institutes have been relying on RISI since 2009 to provide them with insight into the trends affecting ICS security. RISI data has been used for business justification, risk analysis and a variety of research projects.
ICS and SCADA security has been a serious concern for over a decade but has come under increased scrutiny following the discovery of the Stuxnet virus in 2010 and the DuQu virus in 2011. Both of these viruses were found to specifically target industrial control systems.
The 80 page 2011 Annual Report includes detailed analysis of the 220 incidents recorded in the RISI database ranging from 2001 through the end of 2011. The analysis identifies where and when the incidents occurred while also identifying the types of incidents and the threat agents that executed them including the methods and techniques used to gain entry. The financial and operational impact on the "victims" is also analyzed.
The report also includes detailed results and analysis from the first annual RISI Control System Security Benchmark Survey. The survey data provides very interesting insight into the current state of control system security especially when compared with the data regarding actual incidents. For example, RISI data indicates that the percentage of control system security incidents caused by malware, while still very high (28%), has been steadily declining over the last 5 years. This trend is supported by survey data that indicates that more than 60% of facilities have implemented patch and anti-malware management programs.
The report can be purchased individually or as part of a Company or Corporate Membership.
About the Security Incidents Organization:
Founded in 2009, the Security Incidents Organization is a non-profit organization, whose mission is to collect, track, analyze and share high-value information regarding industrial cyber security incidents with member companies. Visit our website at www.securityincidents.org.
