Internet of Things (IoT) security provider, ForeScout Technologies, Inc. inked partnerships with Indegy and SecurityMatters to integrate their technologies into its visibility platform in an effort to secure operational technology (OT) environments.
With this new category of industrial control system (ICS) partnerships, ForeScout is looking to provide visibility across the extended enterprise – from campus, data center, cloud to OT networks.
“The essential systems that are foundational to a nation’s economy, security and health are being connected to IT systems and becoming increasingly vulnerable to cyber threats,” said Pedro Abreu, chief strategy officer, ForeScout. “Cyberattacks on critical infrastructure introduce dangerous risks that go beyond financial loss or business disruption, and can threaten physical safety. ForeScout is partnering with industry leading ICS security vendors that share our commitment for transforming security through visibility to protect the most critical systems.”
As operational and industrial control systems connect to IT environments, it’s critical for organizations to build and maintain an asset inventory of every device in every ICS layer and ensure compliance with industry regulations and security standards. However, ICS devices create unique challenges for organizations because most cannot support traditional security methods, and are sensitive to legacy scanning and monitoring techniques. Also, given the importance of critical infrastructure, many of these devices cannot be taken offline for maintenance and patching.
ForeScout provides inventory and device compliance capabilities for network-connected devices. By partnering with Indegy and SecurityMatters, ForeScout now offers deeper visibility into every layer of ICS environments, including SCADA systems, programmable logic controllers (PLC) and sensors. With partners sharing device data, ForeScout consolidates governance to deliver visibility and control of all ICS and IT assets while enabling device compliance, incident detection and response, and effective risk mitigation across the entire environment.
“OT networks have been unmanaged, from a security and risk perspective, for many years,” said According to a May 2018 Gartner, Inc. report by Saniye Burcu Alaybeyi, entitled “2018 Strategic Roadmap for Integrated ITand OT Security.” “They are flat, with a mix of OT protocols, unidentified assets, legacy systems and devices with unsecure communications… Successful security governance in an integrated IT/OT environment must be able to balance enterprisewide objectives with the combined risk appetite and the capability to secure and protect the two domains.”
Leveraging insights from our partnerships with Indegy and SecurityMatters, ForeScout’s goal is to deliver integrated security capabilities across IT, OT and critical infrastructure environments through:
• End-to-end agentless visibility and security
• Automated asset discovery and management
• Real-time threat detection and contextual alerts
• Continuous validation of asset configurations and compliance
• Deeper incident response and threat mitigation