Business Wire

SecurityScorecard Research Finds 48% of Global Critical Manufacturing At Significant Risk of Breach

Share

SecurityScorecard, the global leader in cybersecurity ratings, today announced the results of its new report, Addressing the Trust Deficit In Critical Infrastructure, which revealed 48% of critical manufacturing organizations ranked “C,” “D,” or “F” on SecurityScorecard’s security ratings platform. Published during the World Economic Forum (WEF) Annual Meeting, the report analyzed the current state of cyber resilience in the critical infrastructure sectors such as Energy, Chemical, Healthcare, and others, as designated by the Cybersecurity and Infrastructure Security Agency (CISA). Organizations with an “A” security rating are 7.7 times less likely to sustain a breach than those with an “F” rating.

“Security ratings are a trusted barometer of cyber resilience and the time is now for policymakers and organizations to make cyber risk measurement mandatory,” said Aleksandr Yampolskiy, co-founder and CEO of SecurityScorecard. “Cyberattacks in the last 10 years have gotten much worse, more complex, and increasingly have targeted critical infrastructure, thereby undermining the public’s trust in the cyber resilience of our global economy.”

SecurityScorecard provides comprehensive security ratings, automated assessments, and guidance from industry experts, providing a patented and easy-to-understand A-F graded scorecards for improved communication, effective compliance reporting, and more informed decision-making.

According to the World Economic Forum, only 19% of cyber leaders feel confident that their organizations are cyber resilient. SecurityScorecard recently joined the World Economic Forum Global Innovators Community, contributing to WEF’s Centre for Cybersecurity’s initiative to address systemic challenges, improve trust, and build cyber resilience. Yampolskiy is attending the WEF Annual Meeting in Davos to engage with the world’s foremost public- and private-sector leaders on mitigating global cyber risk, including within critical infrastructure.

Critical Manufacturing Patching Cadence Falls Amid Escalating Attack Cadence

Cyber incidents affecting critical infrastructure, once comparatively rare, have become far more frequent in recent years as nation-states and their proxies escalate their pursuit of geopolitical objectives. Data from the Federal Bureau of Investigation showed that 14 of the 16 sectors considered critical infrastructure by the U.S. government experienced at least one ransomware attack in 2021.

SecurityScorecard assessed these industries to measure their current state of cyber resilience. It found that critical manufacturing is highly vulnerable based on analysis of all organizations under that category in The Forbes Global 2000 list. SecurityScorecard considers 10 factors when developing an organization’s security rating. Of those 10, the patching cadence ‘factor’ for critical manufacturing experienced a significant drop from 2021 to 2022, moving from 88 (B) to 76 (C).

High and Medium-Severity CVEs Strain Resources

The decline in patching is likely due to an increased volume of vulnerabilities. Critical manufacturing experienced a 38% year-over-year increase in high severity vulnerabilities. In 2022 alone, 76% of critical manufacturing organizations have high and medium-severity CVEs.

These CVEs may, in some cases, facilitate ransomware groups’ targeting of organizations in the sector. Manufacturers experienced an increase in malware infections from 2021 to 2022. In 2022, 37% of critical manufacturing organizations had malware infections.

“While investing in more technology might seem burdensome to resource-constrained critical infrastructure operators, the reality is that cybersecurity ratings technology is extremely cost-effective, especially when you consider the catastrophic cost of a breach is $9.44 million on average for U.S. organizations,” continued Yampolskiy. “By leveraging security ratings, these organizations have a simple way to build resilience and make more informed decisions to strengthen their cyber defenses by confidently measuring risk and quantifying the trustworthiness of their partners, contractors, third-and fourth-party vendors, and supply chains.”

To view the full research paper, please visit: https://resources.securityscorecard.com/davos-2023/addressing-the-trust-deficit

About SecurityScorecard

Funded by world-class investors including Evolution Equity Partners, Silver Lake Waterman, Sequoia Capital, GV, Riverwood Capital, and others, SecurityScorecard is the global leader in cybersecurity ratings with more than 12 million companies continuously rated. Founded in 2013 by security and risk experts Dr. Aleksandr Yampolskiy and Sam Kassoumeh, SecurityScorecard's patented rating technology is used by over 30,000 organizations for enterprise risk management, third-party risk management, board reporting, due diligence, cyber insurance underwriting, and regulatory oversight. SecurityScorecard is the first cybersecurity ratings company to offer digital forensics and incident response services, providing a 360-degree approach to security prevention and response for its worldwide customer and partner base. SecurityScorecard continues to make the world a safer place by transforming the way companies understand, improve and communicate cybersecurity risk to their boards, employees and vendors. Every organization has the universal right to their trusted and transparent Instant SecurityScorecard rating. For more information, visit securityscorecard.com or connect with us on LinkedIn.

To view this piece of content from cts.businesswire.com, please give your consent at the top of this page.

Contact information

Derek Delano
SecurityScorecard
ddelano@securityscorecard.io
(646) 457-4513

About Business Wire

For more than 50 years, Business Wire has been the global leader in press release distribution and regulatory disclosure.

Subscribe to releases from Business Wire

Subscribe to all the latest releases from Business Wire by registering your e-mail address below. You can unsubscribe at any time.

Latest releases from Business Wire

Crown Bioscience Announces New Preclinical and Translational Oncology Data Across Ten Poster Presentations at AACR 202428.3.2024 15:30:00 EET | Press release

Crown Bioscience, a global contract research organization (CRO) and a JSR Life Sciences company, will showcase significant contributions in preclinical and translational oncology research at the American Association for Cancer Research (AACR) 2024 meeting. Highlighting its latest research, the company will present ten posters covering a broad spectrum of data from the company's R&D program. The data presented will cover a range of innovative techniques in oncology and immuno-oncology drug discovery and development. Posters featured at AACR include: The in-depth Characterization of Acute Myeloid Leukemia Patient-Derived Xenograft (PDX) Models with Hotspot Gene Mutations for Therapeutic Evaluation. The development of an Integrated Pipeline for Immuno-Oncology Drug Testing, using patient-derived tumor organoids with a reconstituted tumor microenvironment and fresh ex vivo patient tissue cultures, aiming to enhance therapeutic evaluation and drug development efficiency with translational p

Philip Morris International Demonstrates Clear Progress Toward Its Purpose as It Releases 2023 Integrated Report28.3.2024 14:38:00 EET | Press release

Philip Morris International Inc. (PMI) (NYSE: PM) today releases its fifth annual Integrated Report, which outlines the company’s ongoing work to advance toward its 2025 Roadmap goals, with the primary focus on addressing the health impacts of the company’s products. The 2023 Integrated Report highlights PMI’s continued expansion of smoke-free alternatives in markets worldwide, as well as social and environmental programs deployed with and in parallel to these products—including the deployment of responsible marketing and sales practices and efforts to reduce post-consumer waste. Further, PMI reports its progress toward fostering an empowered and inclusive workplace, improving the quality of life of people in its supply chain, decarbonizing its operations and value chain, and preserving nature and biodiversity. “2023 was a year marked by unity, determination, and a continued commitment to our vision of a smoke-free future,” said Jacek Olczak, Chief Executive Officer of PMI. “As we enco

Wolters Kluwer named Market Leader in BARC Score Financial Performance Management 202428.3.2024 14:09:00 EET | Press release

Wolters Kluwer, a global leader in information, software, and services for professionals, today announces that its CCH® Tagetik expert solution has retained its leadership position for the seventh consecutive year in both the Global and DACH region issues of the prestigious BARC Score Financial Performance Management (FPM) Report. Developed by BARC, one of Europe’s leading analyst firms for business software, the reports highlight CCH Tagetik’s strength as a unified platform for financial corporate management (financial consolidation and close; budgeting, planning, and forecasting; ESG and regulatory reporting; corporate tax) that can be used by individual subsidiaries or at group level. Ralf Gärtner, Senior Vice President and General Manager of Corporate Performance & ESG, Wolters Kluwer, said: “The BARC Score FPM Reports have ranked CCH Tagetik as a market leader year after year, recognizing our consistent commitment to product excellence and innovation. We are focused on empowering

Cirium’s Airfare Data Shows Increases in Economy Airfares in 2023 in North America and Europe With a Decrease in Transatlantic Business Class Fares28.3.2024 13:37:00 EET | Press release

Cirium, the leading aviation analytics company, analysed airfare trends for 2023, using Cirium FM Traffic. Economy airfare has generally increased since 2023 in North America and Europe, but lower than the U.S. inflation rate. “While airfare has risen in nominal terms in U.S. and Europe, consumers will appreciate that the increases are less than other consumables,” said Jeremy Bowen, CEO of Cirium. “Cirium’s data teams will continue to monitor the impact on fares of increased capacity in the market, despite challenges related to the availability of aircraft, be it due to groundings, engine issues, or supply chain constraints.” Cirium analysed airfare for the U.S. domestic market (including 13 U.S. airlines), intra-European travel, and the Transatlantic market. The data is non-directionally averaged, in U.S. dollars, not including taxes and fees. Unless otherwise noted, the fares indicated are for economy class. U.S. Domestic Airfare The average U.S. domestic airfare by the 13 airlines

Ministry of Education and Science of Ukraine and Palantir Partner to Create Safe Conditions for In-Person Education in Schools28.3.2024 12:00:00 EET | Press release

The Ministry of Education and Science, along with Palantir (NYSE:PLTR), a leading provider of AI systems, have signed an agreement. The main goal is to facilitate qualitative transformations in the field of education and ensure the maximum number of children have access to safe in-person learning. The agreement, initially for 12 months, will support the Government’s official School Offline initiative which aims to provide 300,000 more Ukrainian pupils with safe access to a school. New software tooling will enable: Funding allocated for school bomb shelters to be targeted where it will deliver the greatest benefit for children and young people of a school age. Every school to receive a risk rating according to a methodology recently adopted in law as a Cabinet of Ministers decree, in order to help identify targeted measures that will improve the safety of a school. The rating will take into account factors such as historic shelling in the area, presence of a bomb shelter, safety of acce

In our pressroom you can read all our latest releases, find our press contacts, images, documents and other relevant information about us.

Visit our pressroom
HiddenA line styled icon from Orion Icon Library.Eye