Written by: Griffiths & Armour on: 16 May 2024

Cyber Risk Insurance | Griffiths & Armour

Protecting Operational Technology

Given the increasing use of cloud-hosted systems to control operational technology, the National Cyber Security Centre (NCSC) has recently published guidance in this area to assist organisations to risk assess and protect these systems. Operational technology can be defined as technology which interfaces with the physical world and includes Industrial Control Systems (ICS), Supervisory Control and Data Acquisition (SCADA) and Distributed Control Systems (DCS). Such systems are increasingly being targeted by threat actors due to the potential for immediate and devasting consequences following a successful cyber-attack.

Areas covered by the guidance include:

  • Introduction to ‘cloud-hosted SCADA’
  • Threat to SCADA
  • Gaining flexibility
  • Resilience and scalability
  • Remote access improvements
  • Centralising authentication, secrets, and key management
  • Do you have access to cloud expertise?
  • Have you considered the policies and processes required?
  • Have you considered the impact of shared services?
  • Software suitability for the cloud
  • Legacy hardware solutions and hybrid connectivity
  • Latency
  • Data sensitivity

It is recommended that organisations with operational technology review their cyber risk management arrangements against this new guidance which is available here.

Griffiths & Armour can conduct cyber insurance assessments to aid the understanding of cyber risk exposure to inform the insurance risk transfer strategy. Further cyber risk and cyber incident response guidance supplemented by template policies and plan documentation plus e-learning is available via RMworks, which is available to all Griffiths & Armour clients.  Further information on RMworks is available here.

Reach out to the author to discover the Griffiths & Armour difference

Greg Street | Griffiths & Armour
  • Risk management We identify, manage and support you to reduce risks.
  • Leading insight We share claims intelligence and the effect new laws or legislation have on your policies.
  • Claims management If you need to claim you’ll get immediate support and effective resolution.
  • Trusted We are trusted risks advisors to professional institutes and trade associations.