“Made by FPT IS” solutions establish a digital fence for comprehensive IT and OT/ICS protection
At the 6th Vietnam Security Summit 2024, Dr. Nguyen Thanh Binh, Global Cybersecurity Consultant at FPT IS, joined business leaders to analyze issues and propose strategies and technological initiatives for protecting industrial control systems (OT/ICS).
The Vietnam Security Summit 2024 is organized by the Ministry of Information and Communications in collaboration with the Authority of Information Security and the IEC Group. Amid a complex security landscape and the rapid development of AI, which presents both benefits and challenges, the Summit offers a platform for participants to exchange knowledge and share technology. This collaborative effort aims to enhance the ability to respond to next-generation cybersecurity risks and challenges.
Opening the event, Deputy Minister of Information and Communications Pham Duc Long emphasized the need for synchronized coordination between organizations, businesses, and government agencies to ensure information security. He stated that this cooperation not only creates opportunities for sharing information and experiences but also enhances the collective ability to respond quickly and effectively to threats.
Deputy Minister of Information and Communications spoke at the Summit.
According to figures reported at the Summit, the world is estimated to have lost up to $8,000 billion due to cyber attacks in 2023, equivalent to nearly $21 billion per day. This figure is expected to increase to $9,500 billion by 2024. Additionally, every 11 seconds, an organization globally falls victim to a ransomware attack.
Understanding these challenges, Dr. Nguyen Thanh Binh, FPT IS’s Global Cybersecurity Consultant, presented at the “Critical Infrastructure Security” session on outstanding cybersecurity trends for Operational Technology (OT) and Industrial Control Systems (ICS). His presentation highlighted solutions that contribute to building a robust “digital fence” for technology systems being operated in power, oil and gas, chemical, and water plants that directly and continuously impact daily life.
Dr. Nguyen Thanh Binh – FPT IS’s Global Cybersecurity Consultant presented at the Summit.
Dr. Binh analyzed four main trends affecting cybersecurity protection for OT/ICS systems: IT/OT convergence, increasing OT/ICS network attacks, the transformation of security approach strategies to protect OT/ICS systems, and the ongoing expansion and specialization in protecting OT/ICS systems. He illustrated these trends by comparing and connecting them with real cases he has conducted in Vietnam, helping listeners understand the issues clearly and practically.
Today, digital transformation and the adoption of new technologies such as cloud computing and AI are inevitable trends for organizations seeking to optimize production and equipment operation. This advancement has driven key infrastructure and manufacturing enterprises to develop smart factory models, where devices and machines are interconnected through the Industrial Internet of Things (Industrial IoT).
This convergence offers benefits such as automating and optimizing operations, collecting and analyzing production data, and improving decision-making, all of which help reduce costs and enhance business efficiency. However, when systems connect to the outside world, they expose inherent weaknesses and security vulnerabilities, making them targets for various attackers, including the most dangerous ones: terrorist groups and state-sponsored entities.
Dr. Binh discussed the main trends affecting cybersecurity protection for OT/ICS systems, along with recommendations for state agencies and businesses.
In response to this situation, the approach to protecting OT/ICS systems is transitioning from boundary defense and isolation from the external environment to emphasizing early detection and response. Furthermore, the protection of OT/ICS systems is evolving towards expansion and specialization tailored to specific sectors such as electricity, railways, maritime, and smart transportation.
Therefore, the FPT IS expert recommended that organizations and businesses focus on training and raising awareness among leaders, operational engineers, and office users. They should establish a dedicated team comprising security experts, technicians, and leaders to ensure cybersecurity for industrial systems. It is also crucial to promptly review and enhance security hardening for systems connected to WANs or the Internet. Additionally, testing and deploying technical solutions, particularly System Visibility solutions, was suggested. Periodic assessments of comprehensive security according to a unified security reference standard/framework are essential for maintaining organizational security.
State management agencies should redefine the crucial security role of OT/ICS concerning key information systems for national security, as stipulated in the cybersecurity law. They should conduct condition reviews and prevention measures, develop and deploy policies, and provide guidelines for units that own and operate OT/ICS systems. Establishing a center to share security incidents in the OT/ICS field was also recommended.
The FPT IS expert and speakers at the discussion session of the Summit.
In collaboration with organizations, businesses and banks to prevent cyber fraud, FPT IS is currently developing its ecosystem of security solutions, designed to create a comprehensive safeguarding circle for the digital assets of organizations, businesses, and individuals engaged in digital transactions. A typical solution suite is FPT.EagleEye, which comprises the Managed Security Operations Center (FPT.EagleEye mSOC), the Managed Detection and Response Solution (FPT.EagleEye MDR), PCI DSS Consulting, Assessment, and Certification services, Penetration Testing services (Pentest), Proactive Phishing Awareness Training service (FPT.EagleEye Phish-Training), and Anti-fraud Solution for Digital Identity Verification (FPT.IDCheck).
“FPT IS, boasting over 25 years of experience in Information Security, stands as a trusted partner for leading international and local organizations, businesses, and banks. With its technological expertise and product development capacity, FPT IS wishes to assist Vietnam in combating fraud, establishing a secure network environment, and tackling significant societal challenges”, affirmed the FPT IS expert.
