Business Wire

SecurityScorecard Research Finds 48% of Global Critical Manufacturing At Significant Risk of Breach

Share

SecurityScorecard, the global leader in cybersecurity ratings, today announced the results of its new report, Addressing the Trust Deficit In Critical Infrastructure, which revealed 48% of critical manufacturing organizations ranked “C,” “D,” or “F” on SecurityScorecard’s security ratings platform. Published duringthe World Economic Forum (WEF) Annual Meeting, the report analyzed the current state of cyber resilience in the critical infrastructure sectors such as Energy, Chemical, Healthcare, and others, as designated by the Cybersecurity and Infrastructure Security Agency (CISA). Organizations with an “A” security rating are 7.7 times less likely to sustain a breach than those with an “F” rating.

“Security ratings are a trusted barometer of cyber resilience and the time is now for policymakers and organizations to make cyber risk measurement mandatory,” said Aleksandr Yampolskiy, co-founder and CEO of SecurityScorecard. “Cyberattacks in the last 10 years have gotten much worse, more complex, and increasingly have targeted critical infrastructure, thereby undermining the public’s trust in the cyber resilience of our global economy.”

SecurityScorecard provides comprehensive security ratings, automated assessments, and guidance from industry experts, providing a patented and easy-to-understand A-F graded scorecards for improved communication, effective compliance reporting, and more informed decision-making.

According to the World Economic Forum, only 19% of cyber leaders feel confident that their organizations are cyber resilient. SecurityScorecard recently joined the World Economic Forum Global Innovators Community, contributing to WEF’s Centre for Cybersecurity’s initiative to address systemic challenges, improve trust, and build cyber resilience. Yampolskiy is attending the WEF Annual Meeting in Davos to engage with the world’s foremost public- and private-sector leaders on mitigating global cyber risk, including within critical infrastructure.

Critical Manufacturing Patching Cadence Falls Amid Escalating Attack Cadence

Cyber incidents affecting critical infrastructure, once comparatively rare, have become far more frequent in recent years as nation-states and their proxies escalate their pursuit of geopolitical objectives. Data from the Federal Bureau of Investigation showed that 14 of the 16 sectors considered critical infrastructure by the U.S. government experienced at least one ransomware attack in 2021.

SecurityScorecard assessed these industries to measure their current state of cyber resilience. It found that critical manufacturing is highly vulnerable based on analysis of all organizations under that category in The Forbes Global 2000 list. SecurityScorecard considers 10 factors when developing an organization’s security rating. Of those 10, the patching cadence ‘factor’ for critical manufacturing experienced a significant drop from 2021 to 2022, moving from 88 (B) to 76 (C).

High and Medium-Severity CVEs Strain Resources

The decline in patching is likely due to an increased volume of vulnerabilities. Critical manufacturing experienced a 38% year-over-year increase in high severity vulnerabilities. In 2022 alone, 76% of critical manufacturing organizations have high and medium-severity CVEs.

These CVEs may, in some cases, facilitate ransomware groups’ targeting of organizations in the sector. Manufacturers experienced an increase in malware infections from 2021 to 2022. In 2022, 37% of critical manufacturing organizations had malware infections.

“While investing in more technology might seem burdensome to resource-constrained critical infrastructure operators, the reality is that cybersecurity ratings technology is extremely cost-effective, especially when you consider the catastrophic cost of a breach is $9.44 million on average for U.S. organizations,” continued Yampolskiy. “By leveraging security ratings, these organizations have a simple way to build resilience and make more informed decisions to strengthen their cyber defenses by confidently measuring risk and quantifying the trustworthiness of their partners, contractors, third-and fourth-party vendors, and supply chains.”

To view the full research paper, please visit: https://resources.securityscorecard.com/davos-2023/addressing-the-trust-deficit

About SecurityScorecard

Funded by world-class investors including Evolution Equity Partners, Silver Lake Waterman, Sequoia Capital, GV, Riverwood Capital, and others, SecurityScorecard is the global leader in cybersecurity ratings with more than 12 million companies continuously rated. Founded in 2013 by security and risk experts Dr. Aleksandr Yampolskiy and Sam Kassoumeh, SecurityScorecard's patented rating technology is used by over 30,000 organizations for enterprise risk management, third-party risk management, board reporting, due diligence, cyber insurance underwriting, and regulatory oversight. SecurityScorecard is the first cybersecurity ratings company to offer digital forensics and incident response services, providing a 360-degree approach to security prevention and response for its worldwide customer and partner base. SecurityScorecard continues to make the world a safer place by transforming the way companies understand, improve and communicate cybersecurity risk to their boards, employees and vendors. Every organization has the universal right to their trusted and transparent Instant SecurityScorecard rating. For more information, visit securityscorecard.com or connect with us on LinkedIn.

To view this piece of content from cts.businesswire.com, please give your consent at the top of this page.

Contact information

Derek Delano
SecurityScorecard
ddelano@securityscorecard.io
(646) 457-4513

About Business Wire

Business Wire
Business Wire
24 Martin Lane
EC4R 0DR London

+44 20 7626 1982http://www.businesswire.co.uk

(c) 2018 Business Wire, Inc., All rights reserved.

Business Wire, a Berkshire Hathaway company, is the global leader in multiplatform press release distribution.

Subscribe to releases from Business Wire

Subscribe to all the latest releases from Business Wire by registering your e-mail address below. You can unsubscribe at any time.

Latest releases from Business Wire

Cognite Data Fusion ® Achieves Industry First DNV Compliance for Digital Twins30.3.2023 09:04:00 CEST | Press release

Cognite, a global leader in industrial software, in a joint effort with Aker BP, today announced it has successfully achieved DNV-RP-A204 compliance. DNV, the world’s leading classification society and independent expert in assurance and risk management, developed DNV-RP-A204 as a quality-assurance benchmark for the energy industry’s varying approaches to building and operating digital twins. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20230329005990/en/ S&P Global Oil & Gas Digital Twin Supplier Landscape, select firms (Graphic: Business Wire) The compliance pertains to Cognite’s core product, Cognite Data Fusion®, an Industrial DataOps platform that combines disparate data sources and information to host, structure, integrate, and contextualize data for digital twin solutions. The assessment scope includes cybersecurity, and software development maturity, including verification and validation process, data quality indicat

Takeda Announces Candidates for Board of Directors at Upcoming Shareholders Meeting30.3.2023 09:00:00 CEST | Press release

Takeda (TSE:4502/NYSE:TAK) announced that its Board of Directors today decided that it will propose a new candidate for independent external director at the 147th Ordinary Meeting of Shareholders on June 28th, 2023. The new candidate, Miki Tsusaka, will join the board effective June 28th, if approved by the shareholders. Furthermore, Masato Iwasaki, Representative Director, Japan General Affairs expressed his intention to retire on the same day. All other current board members who are not our Audit & Supervisory Committee members will be proposed for re-election. “On behalf of Takeda’s Board of Directors, I would like to thank Masato Iwasaki for his invaluable contribution to Takeda. In his nearly 40-year career with Takeda, he has made a significant impact supporting Takeda transformation to become a global biopharmaceutical company, while staying true to our values.” said Christophe Weber, Representative Director, President and Chief Executive Officer of Takeda. Dr. Iwasaki started h

Farmers’ Fintech Agreena Raises €46M to Scale the Regenerative Revolution30.3.2023 08:00:00 CEST | Press release

Climate and fintech company Agreena, whose soil carbon platform is one of the largest globally, today announced its Series B raise of €46M. Led by Germany’s leading multi-stage investor HV Capital, the round has an exciting composition of new investors including impact fund AENU and fintech-focused Anthemis. The equity raise is also supported by a doubling-down from existing shareholders, including evergreen food investor Gullspång Re:food, well-established tech investor Kinnevik and Denmark’s Export and Investment fund. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20230329005976/en/ Agriculture-based carbon removals are considered one of the most readily available and easily scaled solutions for climate change mitigation (Photo: Business Wire) The sizable raise comes just one year after the company’s €20M Series A. Since then, Agreena has scaled its activities 10X, expanded its geographic footprint to cover farmland in 16 E

Akkodis Selected by Thales to Deliver Customer Support Engineering Services Worldwide30.3.2023 08:00:00 CEST | Press release

Akkodis, part of the Adecco Group, today announced that it has been selected by Thales to deliver customer support engineering services. Thales is a worldwide technology leader that provides solutions, products and services to the aerospace, defense, transportation and security sectors. In this significant partnership development, Akkodis, a global digital engineering company and Smart Industry leader, has been selected to provide customer support engineering services that span the breadth of Thales’ portfolio, including Integrated Logistics Support (ILS), technical publication and training services. Akkodis’ engineers will work alongside Thales’ teams from ideation through the design and development phases, and beyond to encompass the in-service support phase. This will help to ensure that products and solutions are optimized to accommodate the in-service qualities of safety, reliability and maintenance, as specified by Thales’ end customers. The engineers will also author technical d

AMWC 2023: Data From Sculptra® Cheek Wrinkle and Alluzience® Star Studies Reinforce Strength of Galderma’s Broad Aesthetic Portfolio30.3.2023 07:00:00 CEST | Press release

Galderma will be presenting the latest data from the Sculptra® (injectable poly-L-lactic acid, PLLA-SCA) Cheek Wrinkle and Alluzience® (abobotulinumtoxinA solution) STAR studies at the 21st Aesthetic & Anti-Aging Medical World (AMWC) Congress, taking place in Monaco, from March 30 to April 1, 2023. Results demonstrate high aesthetic improvement as well as patient and investigator satisfaction for both products, reinforcing the strength of the company’s highly differentiated aesthetic portfolio, and underscoring its commitment to delivering science, innovation, and a premium experience throughout the treatment journey.1,2 Data from the innovative Sculptra Cheek Wrinkle study, a large clinical registration trial in the United States, show the long-lasting effectiveness of the treatment for cheek wrinkle correction over a two-year period.1 Sculptra is the first and original collagen stimulator with the unique PLLA-SCA3,4,5,6,7,8 that addresses the root causes of the skin aging process by