Welcome Guest. | Log In | Register | Membership Benefits

New Pike Research Report Spotlights Growing Need For Integrated Approach To Security

Technology and business trends are driving demand for improved automation around governance and regulatory compliance

Jan 04, 2012 | 02:20 PM | 


FOXBOROUGH, Mass.-- Industrial Defender, the global leader in security and compliance management for automation systems, in conjunction with Pike Research, a leading clean technology market research and consulting firm, today announced the publication of a new research report on the automation systems market.

Entitled Convergence in Automation Systems Protection, the report was authored by Pike Research Senior Analyst Bob Lockhart, and was sponsored by Industrial Defender. It examines the changing dynamics in the automation systems market, including technology, regulatory and business trends. The report also shows how these market developments are driving demand among critical infrastructure operators for new, integrated approaches to monitoring, managing and protecting their automation systems.

One key factor cited in the report is growing control system complexity. Since most automation environments were developed over decades without a master plan, they now contain heterogeneous systems that are difficult to manage. Another factor is resource constraints; with today’s business conditions, operators are being asked to do more with less. A third major market driver is the exponential growth of intelligent devices deployed in automation environments. These networked and IP-enabled devices are creating management requirements with which operators have limited experience.

The report discusses how these and other trends are motivating operators of automation environments, such as industrial control systems (ICS), to seek new, more efficient ways to monitor, manage and protect their critical systems. It underscores the fact that with all the changes occurring in their environments, operators need technology and tools that enable them to a more integrated and intelligent approach to security, compliance and change management.

“In researching this report, we saw two main themes clearly emerging in the market,” said Pike Research Senior Analyst Bob Lockhart. “First is a growing recognition among ICS professionals of overlaps in the processes, data and technology required to monitor, manage and secure today’s automation environment. The second theme is that significant workload and expense reductions can be achieved by taking an integrated approach to these presently separate functions and processes. ICS managers can benefit from unified solutions that process this cross-functional complexity within the systems themselves, insulating users from the inherent complexity.”

“Just as we’ve seen in many other markets, there’s an evolution occurring in automation systems,” said Brian Ahern, president and CEO of Industrial Defender. “The first generation brought us point products that offered in-depth capabilities for solving problems in a single functional area. Now, customers want smarter solutions that can straddle several key areas, and leverage data and intelligence across those areas in a unified view. In our view, it’s a natural progression toward more efficient change management. Companies that embrace it will gain real competitive advantages.”

Additional key findings in the report include the following.

Cyber security – New technologies are providing operators with real-time visibility into their industrial control systems and more proactive ways to maintain and optimize those systems. But these advances come with operating systems, applications and hardware that have vulnerabilities that did not exist in earlier systems. As a result, automation systems now need the same levels of management and security that have been seen in enterprise networks for the past two decades.

Governance and regulatory compliance – Many companies now must document their compliance with regulatory requirements such as the NERC Critical Infrastructure Protection (CIP) standards. Additionally, companies have their own internal compliance and performance requirements that must be adhered to. To efficiently meet external and internal requirements while minimizing administrative burdens, compliance systems must become more automated.

Control system operations – Control networks are typically large and complex, as are the technologies used to automate them. Growing numbers of point solutions in these environments make them more complex. To increase efficiency, operators need to integrate their disparate systems. But these integration projects are often costly and time consuming. They also require the attention of key staff people who could otherwise be focused on other initiatives more strategic to the organization.

The solution: Integrate the three key functions – As companies pursue service and performance improvements, such as gaining greater visibility into control networks to prevent outages, they find commonalities across security, compliance and change management functions. Many of these overlapping tasks and data requirements can be reduced to a single set of actions that need to be done only once. To gain this efficiency, operations can deploy solutions that tightly integrate security, compliance and change management functions on a single platform.

To download a copy of this new Pike Research report, go to: asm.industrialdefender.com

About Pike Research

Pike Research is a market research and consulting firm that provides in-depth analysis of global clean technology markets. The company's research methodology combines supply-side industry analysis, end-user primary research and demand assessment, and deep examination of technology trends to provide a comprehensive view of these industry sectors.

About Industrial Defender

Industrial Defender is the global leader in security & compliance management for automation systems. Our technology empowers customers to sustain security and compliance, while enhancing operational excellence by protecting against breaches that might threaten availability, performance, health and safety.

Industrial Defender’s portfolio of defense-in-depth security, sustainable compliance management, and policy and reporting solutions enable customers to monitor, manage and protect their vital assets, while easing the audit process. Over 350 companies in 21 countries rely on Industrial Defender technology to help secure their critical infrastructure.



Currently we allow the following HTML tags in comments:

Single tags

These tags can be used alone and don't need an ending tag.

<br> Defines a single line break

<hr> Defines a horizontal line

Matching tags

These require an ending tag - e.g. <i>italic text</i>

<a> Defines an anchor

<b> Defines bold text

<big> Defines big text

<blockquote> Defines a long quotation

<caption> Defines a table caption

<cite> Defines a citation

<code> Defines computer code text

<em> Defines emphasized text

<fieldset> Defines a border around elements in a form

<h1> This is heading 1

<h2> This is heading 2

<h3> This is heading 3

<h4> This is heading 4

<h5> This is heading 5

<h6> This is heading 6

<i> Defines italic text

<p> Defines a paragraph

<pre> Defines preformatted text

<q> Defines a short quotation

<samp> Defines sample computer code text

<small> Defines small text

<span> Defines a section in a document

<s> Defines strikethrough text

<strike> Defines strikethrough text

<strong> Defines strong text

<sub> Defines subscripted text

<sup> Defines superscripted text

<u> Defines underlined text

Dark Reading encourages readers to engage in spirited, healthy debate, including taking us to task. However, Dark Reading moderates all comments posted to our site, and reserves the right to modify or remove any content that it determines to be derogatory, offensive, inflammatory, vulgar, irrelevant/off-topic, racist or obvious marketing/SPAM. Dark Reading further reserves the right to disable the profile of any commenter participating in said activities.

Disqus Tips To upload an avatar photo, first complete your Disqus profile. | View the list of supported HTML tags you can use to style comments. | Please read our commenting policy.
Subscribe to RSS



Advanced Threats Reports

report How Did They Get In? A Guide to Tracking Down The Source of an APT
If you think that your organization hasn't been affected by an advanced persistent threat, you probably haven't looked hard enough. Identifying that your organization is under attack is difficult enough; determining the scope of infiltration and damage presents a whole new level of challenge. To effectively protect against APTs, security pros will need to employ an arsenal of tools in a coordinated fashion, as well as develop new understandings of and approaches to system and data exploits. Here's a short and simple guide to this challenge.

report Detecting and Defending Against Advanced Persistent Threats
APTs are a growing problem for enterprises big and small. Protecting your organization from these targeted threats requires constant vigilance, ongoing employee training and a concerted effort to align security systems to address every phase of an APT. Companies also need to develop a remediation and response plan if, despite best efforts, defenses are breached.

report Smarter, Stealthier, Sneakier Malware
Increasingly sophisticated and targeted attacks are making it more difficult for organizations to detect and defend against the latest malware. In this compendium of recent coverage from Dark Reading, you?ll get a look at some of the newest -- and most dangerous -- malware on the Web, and what you can do to stop it.

Other reports from the Advanced Threats Tech Center:

Related Content

MOBILE SECURITY - Mapping an Ecosystem of Risk
This white paper highlights the various considerations for defending mobile applications-from the mobile application architecture itself to the myriad testing technologies needed to properly assess mobile applications risk.

Software Security Delivered in the Cloud
This Solution Guide details the automated, turnkey service that requires no special security assessment expertise. It details HP's market-leading static and dynamic analysis technologies that help organizations worldwide gain insight into the security state of their essential business applications.

SANS Mobility/BYOD Security Survey
This survey, which includes input from more than 500 IT professionals, explores how organizations are managing risk around their end user mobile devices as well as what level of policies and controls enterprises have around mobile usage.

Expert Guide to Application Security - Real-time Hybrid Analysis
Explore the next generation of hybrid security analysis - what it is, how it works, and its benefits. This white paper details how hybrid application security enables organizations to resolve critical software security issues faster and at a lower cost than any other available technology.

A Mainstay Partners Study: Does Application Security Pay?
Measuring the Business Impact of Software Security Assurance Solutions: a study of 17 organizations that implemented solutions from Fortify Software, combining industry research and benchmark analysis to identify, qualify, and quantify the full range of benefits seen from their SSA investments.




Featured Webcasts
Featured Whitepapers
Featured Reports