调查报告 | 网络安全措施采用率不高仍困扰着行业【工控译文】
December 6, 2017– Honeywell released a new study showing industrial companies are not moving quickly to adopt cyber security measures to protect their data and operations, even as attacks have increased around the globe.
2017年12月6日——霍尼韦尔发布了一项新的研究报告，显示工业公司并没有迅速采取网络安全措施来保护他们的数据和运营，即使全球各地的攻击日益增加。
The survey – Putting Industrial Cyber Security at the Top of the CEO Agenda – was conducted by LNS Research and sponsored by Honeywell. It polled 130 strategic decision makers from industrial companies about their approach to the Industrial Internet of Things (IIoT), and their use of industrial cyber security technologies and practices. Among the findings were:
这项名叫“将工业网络安全放到首席执行官议程首位” 的调查，由LNS Research负责、霍尼韦尔资助。它调查了130家工业企业的战略决策者对工业物联网（IIoT）的方法，以及他们使用工业网络安全技术和实践情况。结果显示：
• More than half of respondents reported working in an industrial facility that already has had a cyber security breach.
• 45% of the responding companies still do not have an accountable enterprise leader for cyber security.
• Only 37% are monitoring for suspicious behavior.
• Although many companies are conducting regular risk assessments, 20% are not doing them at all.
• 超过一半的受访者表示，其所在工厂出现了网络安全漏洞；
• 45％的回应公司仍然没有一个负责网络安全的企业负责人；
• 只有37％的企业在监视可疑行为；
• 尽管不少公司正在进行定期风险评估，但还有20％的企业根本没有这样做。
“Decision makers are more aware of threats and some progress has been made to address them, but this report reinforces that cyber security fundamentals haven’t been adopted by a significant portion of the industrial community,” said Jeff Zindel, vice president and general manager, Honeywell Industrial Cyber Security. “In order to take advantage of the tremendous benefits of industrial digital transformation and IIoT, companies must improve their cyber security defenses and adapt to the heightened threat landscape now.”
“尽管决策者更加意识到威胁，并且已经取得了一些进展，但这份报告显示网络安全基础还没有被大部分工业企业采用，” 霍尼韦尔工业网络安全副总裁兼总经理Jeff Zindel说道。 “为了充分享受工业数字化转型和工业物联网带来的巨大收益，企业必须提高网络安全防御能力，适应当前的威胁形势。”
The study suggests these three immediate actions for any industrial organization to capture the value of the new technologies:
为了让工业机构获取新技术的价值，这份报告提出了三个应立即执行的行动建议：
1. Making industrial cyber security part of digital transformation strategies;
2. Driving best practice adoption across people, processes and technology, from access controls to risk monitoring, and tap external cyber expertise to fill gaps
3. Focusing on empowering leaders and building an organizational structure that breaks down the silos between IT and OT.
1，让工业网络安全成为数字化转型战略的一部分；
2，从访问控制到风险监控，推动人员、流程和技术间的最佳实践，挖掘外部网络专业知识，填补空白；
3，注重赋权领导，建立组织架构，打破IT与OT之间的孤岛。
“Cyber security needs to be part of every CEO’s agenda to ensure the effective, immediate and long-term deployment of strategies and technologies such as IIoT,” said Matthew Littlefield, president and principal analyst, LNS Research. “In short, in order for a business to succeed on its digital transformation journey, it needs to succeed with industrial cyber security.”
LNS Research总裁兼首席分析师Matthew Littlefield表示：“网络安全需要成为每一位CEO议程中的一部分，以确保工业物联网等战略和技术的有效、即时和长期部署。总而言之，要使企业在数字化转型道路上获得成功，就需要在工业网络安全方面取得成功。”
LNS Research is a researcher and advisor for digital transformation of industry, delivering technology insights for business executives. Its analysts focus on identifying the metrics, leadership, business process, and technology capabilities effecting change.
LNS Research专注于行业数字化转型的研究和顾问，为业务主管提供技术见解。其分析师专注于确定影响变化的指标、领导力、业务流程和技术能力。
Honeywell’s industrial cyber security technologies and expertise are designed to address many of the issues identified in the LNS Research study.
霍尼韦尔的工业网络安全技术和专业知识旨在解决LNS Research研究中确定的诸多问题。
▣ 本文由中华工控网翻译，转载请注明出处
▣ 提示：如果您对本文有任何看法或者知识补充，欢迎在文章后边留言！
▣ 回复“机器人、电机、IPC、PLC、传感器、变频器、工业4.0、工业互联网、工控机、工控安全 ”等关键字，可以查阅相关文章。回复相关月份，如“11”，可查阅11月份工控大事件。