Your security program knows about the firewall, but does it know about the elevator?
A Honeywell survey finds few critical-infrastructure teams continuously monitor building systems, and weak inventories track with longer outages.
Honeywell surveyed 603 critical-infrastructure leaders in May and June and found only 16 percent continuously monitor most building automation systems, 20 percent do so for devices such as cameras, and 21 percent keep a complete asset inventory. Significant incidents averaged 16.2 hours of downtime, with 42 percent of better-inventoried teams back within six hours versus 25 percent of those with weaker inventories. Organizations that passed every compliance audit reported incidents at nearly the same rate as those with findings, 74 percent versus 73 percent, and only 31 percent called themselves fully ready. The piece also notes that by early August attackers had remotely accessed internet-facing PLCs at water systems in at least seven U.S. states, with investigators examining possible Iran-backed hackers.