Business Wire

SecurityScorecard Research Finds 48% of Global Critical Manufacturing At Significant Risk of Breach

Share

SecurityScorecard, the global leader in cybersecurity ratings, today announced the results of its new report, Addressing the Trust Deficit In Critical Infrastructure, which revealed 48% of critical manufacturing organizations ranked “C,” “D,” or “F” on SecurityScorecard’s security ratings platform. Published duringthe World Economic Forum (WEF) Annual Meeting, the report analyzed the current state of cyber resilience in the critical infrastructure sectors such as Energy, Chemical, Healthcare, and others, as designated by the Cybersecurity and Infrastructure Security Agency (CISA). Organizations with an “A” security rating are 7.7 times less likely to sustain a breach than those with an “F” rating.

“Security ratings are a trusted barometer of cyber resilience and the time is now for policymakers and organizations to make cyber risk measurement mandatory,” said Aleksandr Yampolskiy, co-founder and CEO of SecurityScorecard. “Cyberattacks in the last 10 years have gotten much worse, more complex, and increasingly have targeted critical infrastructure, thereby undermining the public’s trust in the cyber resilience of our global economy.”

SecurityScorecard provides comprehensive security ratings, automated assessments, and guidance from industry experts, providing a patented and easy-to-understand A-F graded scorecards for improved communication, effective compliance reporting, and more informed decision-making.

According to the World Economic Forum, only 19% of cyber leaders feel confident that their organizations are cyber resilient. SecurityScorecard recently joined the World Economic Forum Global Innovators Community, contributing to WEF’s Centre for Cybersecurity’s initiative to address systemic challenges, improve trust, and build cyber resilience. Yampolskiy is attending the WEF Annual Meeting in Davos to engage with the world’s foremost public- and private-sector leaders on mitigating global cyber risk, including within critical infrastructure.

Critical Manufacturing Patching Cadence Falls Amid Escalating Attack Cadence

Cyber incidents affecting critical infrastructure, once comparatively rare, have become far more frequent in recent years as nation-states and their proxies escalate their pursuit of geopolitical objectives. Data from the Federal Bureau of Investigation showed that 14 of the 16 sectors considered critical infrastructure by the U.S. government experienced at least one ransomware attack in 2021.

SecurityScorecard assessed these industries to measure their current state of cyber resilience. It found that critical manufacturing is highly vulnerable based on analysis of all organizations under that category in The Forbes Global 2000 list. SecurityScorecard considers 10 factors when developing an organization’s security rating. Of those 10, the patching cadence ‘factor’ for critical manufacturing experienced a significant drop from 2021 to 2022, moving from 88 (B) to 76 (C).

High and Medium-Severity CVEs Strain Resources

The decline in patching is likely due to an increased volume of vulnerabilities. Critical manufacturing experienced a 38% year-over-year increase in high severity vulnerabilities. In 2022 alone, 76% of critical manufacturing organizations have high and medium-severity CVEs.

These CVEs may, in some cases, facilitate ransomware groups’ targeting of organizations in the sector. Manufacturers experienced an increase in malware infections from 2021 to 2022. In 2022, 37% of critical manufacturing organizations had malware infections.

“While investing in more technology might seem burdensome to resource-constrained critical infrastructure operators, the reality is that cybersecurity ratings technology is extremely cost-effective, especially when you consider the catastrophic cost of a breach is $9.44 million on average for U.S. organizations,” continued Yampolskiy. “By leveraging security ratings, these organizations have a simple way to build resilience and make more informed decisions to strengthen their cyber defenses by confidently measuring risk and quantifying the trustworthiness of their partners, contractors, third-and fourth-party vendors, and supply chains.”

To view the full research paper, please visit: https://resources.securityscorecard.com/davos-2023/addressing-the-trust-deficit

About SecurityScorecard

Funded by world-class investors including Evolution Equity Partners, Silver Lake Waterman, Sequoia Capital, GV, Riverwood Capital, and others, SecurityScorecard is the global leader in cybersecurity ratings with more than 12 million companies continuously rated. Founded in 2013 by security and risk experts Dr. Aleksandr Yampolskiy and Sam Kassoumeh, SecurityScorecard's patented rating technology is used by over 30,000 organizations for enterprise risk management, third-party risk management, board reporting, due diligence, cyber insurance underwriting, and regulatory oversight. SecurityScorecard is the first cybersecurity ratings company to offer digital forensics and incident response services, providing a 360-degree approach to security prevention and response for its worldwide customer and partner base. SecurityScorecard continues to make the world a safer place by transforming the way companies understand, improve and communicate cybersecurity risk to their boards, employees and vendors. Every organization has the universal right to their trusted and transparent Instant SecurityScorecard rating. For more information, visit securityscorecard.com or connect with us on LinkedIn.

To view this piece of content from cts.businesswire.com, please give your consent at the top of this page.

Contact information

Derek Delano
SecurityScorecard
ddelano@securityscorecard.io
(646) 457-4513

About Business Wire

Business Wire
Business Wire
24 Martin Lane
EC4R 0DR London

+44 20 7626 1982http://www.businesswire.co.uk

(c) 2018 Business Wire, Inc., All rights reserved.

Business Wire, a Berkshire Hathaway company, is the global leader in multiplatform press release distribution.

Subscribe to releases from Business Wire

Subscribe to all the latest releases from Business Wire by registering your e-mail address below. You can unsubscribe at any time.

Latest releases from Business Wire

PAN Finance Names Libertex ‘Global CFD Broker of the Year’29.3.2024 06:25:00 CET | Press release

As the first quarter of 2024 draws to a close, Libertex is thrilled to announce its first accolade of the new year! The established global financial publication PAN Finance has determined Libertex to be the ‘CFD Broker of the Year – Global 2024’ following a rigorous evaluation process conducted by the publication's highly experienced editorial and research teams. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20240328235325/en/ (Graphic: Libertex) PAN Finance is a trusted source of global financial intelligence with an impressively wide readership across 150 countries. Its ecosystem includes a quarterly magazine, special reports, a news website, and various social media channels. As an organisation, PAN Finance is committed to providing concise, intelligent, and up-to-date news for a worldwide readership of specialists spanning the entire finance industry. The company's awards programme aims to serve as a true indicator of exc

Midea Group releases its first-ever ESG brand story with an unexpected VIP visit highlighting its commitment to sustainability.29.3.2024 02:39:00 CET | Press release

Midea Group: This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20240328526418/en/ Background: Midea Group, a leading global technology group, recently released its 2023 Environmental, Social, and Governance (ESG) Report with ambitious sustainable development goals set for 2030. They include achieving over 500 megawatts of photovoltaic power generation, reducing greenhouse gas emission intensity (scopes 1 and 2) by 0.040, secure Energy Management System Certification for 50 factories, and achieve 100% carbon footprint accounting for major categories of smart home appliances. This is aligned with the Sustainable Development Report Standards of the Global Report Standards of the Global Reporting Initiative (GRI). The new report and campaign focuses on four dimensions: Protect the Blue Planet, Build a Harmonious Community, Practice 'Bring Great Innovations to Life', and Jointly Create the Prosperous Ecology. The campaign: Midea’s ESG

DC Secretary Announces Annual Determinations Committees Outcome28.3.2024 21:14:00 CET | Press release

DC Administration Services, Inc. has today announced the composition of five regional Determinations Committees (DCs), effective from April 27, 2024. Voting Dealers (for all regions): Voting Non-Dealers (for all regions): Bank of America N.A. Citadel LLC Barclays Bank plc Elliott Management Corporation BNP Paribas Pacific Investment Management Company LLC Citibank, N.A. Deutsche Bank AG Goldman Sachs International JPMorgan Chase Bank, N.A. Voting Dealer for the Americas, EMEA, AEJ, and Japan Determination Committees: Mizuho Securities Co., Ltd. The process for selecting DC members is specified in the DC rules. The DC rules, along with more information about the Determinations Committees and what they do can be found at the Determinations Committees website: https://www.cdsdeterminationscommittees.org/. View source version on businesswire.com: https://www.businesswire.com/news/home/20240328441002/en/Contact information Press Inquiries: Orlando Figueroa orlando.figueroa@citadelspv.com

LambdaTest Launches The Phoenix Project, an Employee Resource Group for Women28.3.2024 16:00:00 CET | Press release

LambdaTest, a leading cloud-based unified testing platform, announced the launch of The Phoenix Project, an Employee Resource Group (ERG) dedicated to supporting and promoting the success of its female employees. “LambdaTest is committed to fostering a diverse, inclusive, and equitable workplace where all employees feel valued and empowered to reach their full potential,” said Chandini Chopra, VP of People and Culture at LambdaTest. “The Phoenix Project is a critical step towards achieving this goal by providing a platform for professional development, networking, and mentorship, especially for our women employees.” The Phoenix Project Aims To: Offer professional development workshops, networking opportunities, and dedicated time off for women to participate in ERG initiatives. Provide mentorship programs connecting senior female employees with mentees. Promote leadership development among women within the company. Create a sense of community for women in the workplace. Leadership and

The reopening of the Yokohama Museum of Art adds another innovative and distinctive venue for events in Yokohama28.3.2024 16:00:00 CET | Press release

After extensive renovations, the iconic Yokohama Museum of Art has reopened its doors to visitors from all over the world. The museum’s reopening paves the way to new and closer collaboration with international events in Yokohama. This extraordinary venue is the ideal setting for a one-of-a-kind gathering, in part, supported by the Yokohama Convention & Visitors Bureau (hereinafter YCVB). The Yokohama Museum of Art Founded in 1989, the Yokohama Museum of Art collects over 14,000 works of art that reflect the many facets of life in Yokohama—past, present, and future. The reopening of the museum coincides with the Yokohama Triennale, an international exhibition featuring contemporary artists whose decentralized exhibits turn the entire metropolis into an art museum. The 8th Yokohama Triennale is being held from March 15 to June 9, 2024, with the Yokohama Museum of Art being a pivotal venue for the exhibition. With the museum firmly back on the map as Yokohama’s leading artistic venue, YC

HiddenA line styled icon from Orion Icon Library.Eye