Business Wire

SecurityScorecard Research Finds 48% of Global Critical Manufacturing At Significant Risk of Breach

Share

SecurityScorecard, the global leader in cybersecurity ratings, today announced the results of its new report, Addressing the Trust Deficit In Critical Infrastructure, which revealed 48% of critical manufacturing organizations ranked “C,” “D,” or “F” on SecurityScorecard’s security ratings platform. Published duringthe World Economic Forum (WEF) Annual Meeting, the report analyzed the current state of cyber resilience in the critical infrastructure sectors such as Energy, Chemical, Healthcare, and others, as designated by the Cybersecurity and Infrastructure Security Agency (CISA). Organizations with an “A” security rating are 7.7 times less likely to sustain a breach than those with an “F” rating.

“Security ratings are a trusted barometer of cyber resilience and the time is now for policymakers and organizations to make cyber risk measurement mandatory,” said Aleksandr Yampolskiy, co-founder and CEO of SecurityScorecard. “Cyberattacks in the last 10 years have gotten much worse, more complex, and increasingly have targeted critical infrastructure, thereby undermining the public’s trust in the cyber resilience of our global economy.”

SecurityScorecard provides comprehensive security ratings, automated assessments, and guidance from industry experts, providing a patented and easy-to-understand A-F graded scorecards for improved communication, effective compliance reporting, and more informed decision-making.

According to the World Economic Forum, only 19% of cyber leaders feel confident that their organizations are cyber resilient. SecurityScorecard recently joined the World Economic Forum Global Innovators Community, contributing to WEF’s Centre for Cybersecurity’s initiative to address systemic challenges, improve trust, and build cyber resilience. Yampolskiy is attending the WEF Annual Meeting in Davos to engage with the world’s foremost public- and private-sector leaders on mitigating global cyber risk, including within critical infrastructure.

Critical Manufacturing Patching Cadence Falls Amid Escalating Attack Cadence

Cyber incidents affecting critical infrastructure, once comparatively rare, have become far more frequent in recent years as nation-states and their proxies escalate their pursuit of geopolitical objectives. Data from the Federal Bureau of Investigation showed that 14 of the 16 sectors considered critical infrastructure by the U.S. government experienced at least one ransomware attack in 2021.

SecurityScorecard assessed these industries to measure their current state of cyber resilience. It found that critical manufacturing is highly vulnerable based on analysis of all organizations under that category in The Forbes Global 2000 list. SecurityScorecard considers 10 factors when developing an organization’s security rating. Of those 10, the patching cadence ‘factor’ for critical manufacturing experienced a significant drop from 2021 to 2022, moving from 88 (B) to 76 (C).

High and Medium-Severity CVEs Strain Resources

The decline in patching is likely due to an increased volume of vulnerabilities. Critical manufacturing experienced a 38% year-over-year increase in high severity vulnerabilities. In 2022 alone, 76% of critical manufacturing organizations have high and medium-severity CVEs.

These CVEs may, in some cases, facilitate ransomware groups’ targeting of organizations in the sector. Manufacturers experienced an increase in malware infections from 2021 to 2022. In 2022, 37% of critical manufacturing organizations had malware infections.

“While investing in more technology might seem burdensome to resource-constrained critical infrastructure operators, the reality is that cybersecurity ratings technology is extremely cost-effective, especially when you consider the catastrophic cost of a breach is $9.44 million on average for U.S. organizations,” continued Yampolskiy. “By leveraging security ratings, these organizations have a simple way to build resilience and make more informed decisions to strengthen their cyber defenses by confidently measuring risk and quantifying the trustworthiness of their partners, contractors, third-and fourth-party vendors, and supply chains.”

To view the full research paper, please visit: https://resources.securityscorecard.com/davos-2023/addressing-the-trust-deficit

About SecurityScorecard

Funded by world-class investors including Evolution Equity Partners, Silver Lake Waterman, Sequoia Capital, GV, Riverwood Capital, and others, SecurityScorecard is the global leader in cybersecurity ratings with more than 12 million companies continuously rated. Founded in 2013 by security and risk experts Dr. Aleksandr Yampolskiy and Sam Kassoumeh, SecurityScorecard's patented rating technology is used by over 30,000 organizations for enterprise risk management, third-party risk management, board reporting, due diligence, cyber insurance underwriting, and regulatory oversight. SecurityScorecard is the first cybersecurity ratings company to offer digital forensics and incident response services, providing a 360-degree approach to security prevention and response for its worldwide customer and partner base. SecurityScorecard continues to make the world a safer place by transforming the way companies understand, improve and communicate cybersecurity risk to their boards, employees and vendors. Every organization has the universal right to their trusted and transparent Instant SecurityScorecard rating. For more information, visit securityscorecard.com or connect with us on LinkedIn.

To view this piece of content from cts.businesswire.com, please give your consent at the top of this page.

Contact information

Derek Delano
SecurityScorecard
ddelano@securityscorecard.io
(646) 457-4513

About Business Wire

Business Wire
Business Wire
24 Martin Lane
EC4R 0DR London

+44 20 7626 1982http://www.businesswire.co.uk

(c) 2018 Business Wire, Inc., All rights reserved.

Business Wire, a Berkshire Hathaway company, is the global leader in multiplatform press release distribution.

Subscribe to releases from Business Wire

Subscribe to all the latest releases from Business Wire by registering your e-mail address below. You can unsubscribe at any time.

Latest releases from Business Wire

RevBits Endpoint Security Fully and Successfully Deployed, in a government-based entity PoC, for a True Air-Gapped Environment6.2.2023 15:30:00 CET | Press release

RevBits announces that it has successfully deployed its endpoint security solution in a true air-gapped environment for a federal government entity. RevBits Endpoint Security (RB/EPS) is a fully featured, robust next-generation endpoint security solution. Its detection and blocking capabilities are based on a three-phased analysis engine that utilizes traditional AV signature scanning, a sophisticated machine learning model, and an advanced behavioral analysis protocol. The solution's Phoenix module monitors for common exploit methods to provide additional protection. The solution's EDR module enhances endpoint security and threat mitigation, offering the market the most feature-rich forensics and control capability imaginable. Malicious endpoint investigations are limitless, with a forensics selection menu of over seventy different artifacts collected on schedule or demand and partial and full memory dumps. US Patented technology in the EDR module offers Windows kernel-level security

Rimini Street to Report Fourth Quarter and Fiscal Year 2022 Financial Results on March 1, 20236.2.2023 15:01:00 CET | Press release

Rimini Street, Inc. (Nasdaq: RMNI), a global provider of enterprise software products and services, the leading third-party support provider for Oracle and SAP software products and a Salesforce partner, today announced it will report earnings after the market close on March 1, 2023. The Company will host a conference call and webcast on that date to discuss the fourth quarter and fiscal year 2022 results, and the 2023 outlook, at 5:00 p.m. Eastern / 2:00 p.m. Pacific time. A live webcast of the event will be available on Rimini Street’s Investor Relations site at https://investors.riministreet.com/news-events/events. Dial-in participants can access the conference call by dialing (888) 999-2501 or (848) 280-6480. A replay of the webcast will be available for one year following the event. About Rimini Street, Inc. Rimini Street, Inc. (Nasdaq: RMNI), a Russell 2000® Company, is a global provider of enterprise software products and services, the leading third-party support provider for Or

Taulia Signs Memorandum of Understanding With Aramco to Explore Supplier Financing Solutions6.2.2023 11:45:00 CET | Press release

Taulia, a leading provider of working capital management solutions, today announces it has signed a Memorandum of Understanding (MoU) with Aramco, one of the world's leading integrated energy and chemicals companies, to discuss Taulia providing supplier financing solutions. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20230206005330/en/ As part of its In-Kingdom Total Value Add (iktva) program, which strives to accelerate digital transformation efforts domestically, Aramco recently signed over 100 agreements to help advance a diverse, sustainable and globally competitive industrial ecosystem (please see here for further details). Taulia is undertaking the program in collaboration with J.P. Morgan and Manafa Capital. Cedric Bru, CEO of Taulia, comments: “Through this program, we are paving the way for thousands of businesses worldwide to access affordable financing options and manage their liquidity as they continue to naviga

Ambassador Carlos dos Santos appointed as Executive Chairman of Compass Group Holdings.6.2.2023 10:49:00 CET | Press release

Compass Group Holdings, a leading Energy Project Management, and Integrated Services company operating in East Africa, and headquartered in Maputo, Mozambique, is delighted to announce the appointment of Ambassador Carlos dos Santos to the Board as Executive Chairman with immediate effect. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20230206005124/en/ Ambassador Carlos dos Santos appointed as Executive Chairman of Compass Group Holdings. (Photo: Business Wire) Ambassador Carlos dos Santos is a career Diplomat with distinctive business experience and most recently served as The Ambassador of Mozambique to the United States and High Commissioner for Canada (2015-2022). Prior to this prominent role, his extensive and renowned career included serving as the High Commissioner for the United Kingdom, Ambassador to Ireland and Governor at the Commonwealth Board of Governors (2011-2015), and Ambassador of Mozambique to Germany, Aus

SYNTAGMA CAPITAL enters into exclusive negotiations to acquire Nexans’ LAN/data center (“LAN/DC”) and Telecom /Fibre (“FTTx”) division.6.2.2023 08:30:00 CET | Press release

Syntagma Capital today announces that it has entered into exclusive negotiations with Nexans SA to acquire its LAN/data center (“LAN/DC”) and Telecom /Fibre (“FTTx”) division. The business designs, manufactures, and distributes smart connectivity solutions based on optical fibre and copper technologies to data centers, smart buildings, and telecom operators. The business is headquartered in Paris, France and employs ca. 680 people across its 8 sites located in France, Belgium, Germany, Greece, Morocco and China, and it generated ca. €200m in revenues across 100+ countries. The proposed transaction, which is subject to the fulfillment of customary closing conditions, including the information and consultation of works councils and other regulatory approvals, is expected to be completed by the end of the first half of 2023. “We are pleased to partner with management to continue to grow the business. Providing the backbone for data management is an exciting prospect. Despite a challenging