Cyber Attack Response Business Continuity Plan: Trying to Make the Incident Response for the Factory
Today, more than 40% of cyber-attacks target IoT devices, and where attacks themselves are commercialized, it is becoming essential to take countermeasures against cyber-attacks, not only for defense but also for intrusion. Network management tools for such situations have already begun to appear on the market, IT experts are steadily taking measures and Business Continuity Plans (BCP) will be prepared.
Even with that, is important to understand if the factory is okay and if IT experts have considered an entry point from inside the factory.
When it comes to internal intrusion, the factory has its own characteristics, and special preparation is required. The easiest thing to understand is that the suspension of production at the factory is the suspension of shipment, which directly and quickly affects the business. At the factory, it is important to know how to limit potential damage to a limited range and how to recover quickly, which must be accelerated compared to the general approach. This is obvious to everyone involved in production, but IT experts have no way of knowing it.
In the experience of the author, when the production department hears the words "cyber-attack response BCP", they understand that cyber related issues should be taken up by the IT department, so all consideration are left up to the IT experts. As a result, special preparations were not made in consideration of the unique characteristics of the factory. It was therefore decided to strengthen the response later.
This paper, while referring to the actual results of the factory, will logically explain the measures to be taken based on the characteristics of the factory, and logically show the response in the event of a cyber-intrusion. The goals of this paper are to promote more measures for the entire supply chain and to help form the trust of the future electronic manufacturing industry.