Executive Summary

No organization can detect or prevent 100% of cyberattacks
Industrial enterprises invest millions each year in solutions that are designed to keep mission-critical industrial operations safe from cyberattack. They employ a vast array of cybersecurity equipment and software to identify, protect, and detect all kinds of threats and attacks and to respond to them as quickly as possible. Traditionally, cyber security programs have focused on prevention – on keeping the attacks at bay. However, even with all the investment in prevention, ransomware and other malicious attacks are still breaching cyber defenses. When a breach occurs in the cyber-physical world and damage begins, the need for a fast and effective recovery process becomes painfully clear.

Therefore, every organization should have a recovery plan for “the moment after” a breach occurs. This is especially true for industrial
enterprises, whose mission-critical operations run 24/7 non-stop, and are extremely averse to downtime. Unplanned disruptions to water delivery, electricity distribution, oil/gas pipelines, chemical processing, manufacturing production lines, etc. can be devastating in numerous ways.

Solutions for Cyber Attack Recovery are gaining importance and recognition for the critical role they play in avoiding downtime after an attack and getting industrial operations fully back on track. While Recovery is included in the NIST (National Institute of Standards and Technology at the U.S. Department of Commerce) Cybersecurity Framework (CSF), the recovery function has been woefully underinvested in favor of preventative measures such as incident identification, protection and detection.

We asked industrial enterprises of varied sizes and sectors to tell us what Cyber Attack Recovery processes they have in place, and how quickly their OT/ICS systems can recover from a Ransomware attack or other incidents.

This TPR Survey Report gives you the inside scoop on what OT/ICS cybersecurity professionals think about Cyber Attack Recovery in general and in terms of their own industrial enterprise. Since a high percentage of respondents are members of an OT or Plant cybersecurity team, their experience and insight provide valuable and highly germane perspectives on the state of Cyber Attack Recovery in industrial enterprises.

Report Length – 16 Pages