Protecting Intellectual Property Inside a Connected Factory
Manufacturing Company
External Threats
Problem
Cyberattacks like ransomware are a huge threat.
Solution
To Counter these periodic assessments using a digital forensic approach where we use our Israeli Licensed forensic tools to identify gaps in the existing IT infrastructure and give the business owner a threat assessment report and mitigation plan.
Insider Threats
Problem
The main threat is the organization's IPs that can be design, drawings, customer data. This information is critical as if this info gets leaked, the entire organization can face a dire impact.
Solution
To counter this we can do Periodic audits:(a) Random audits Notice Period audits--- See Annexure (b) If any evidence found we can deep dive with proper due diligence using our on-field manpower doing lifestyle checks and background checks, Discrete Enquiries. Everence has the potential to do deep dive core intelligence.
IoT Device Security
Problem
A manufacturing companies using IoT devices, if the IOT devices get
Solution
Random IoT device forensic assessments are conducted to secure data flow in alignment with IT security guidelines.
SOPs
Problem
Many of the organisations do not have proper SOPs and policies in place, and even if they do, there is no mechanism to monitor it.
Solution
To counter this we can do Periodic audits:• Everence can structure your SOPs and policies as per the data flow, since after doing forensics, we get a clear picture of the data flow pattern.• If there are already existing policies, we can audit them by doing forensics of the critical devices, once we get the report, we can compare to the existing IT policies and create a non-compliance Report. This can be generated periodically and mitigated, this will reduce the gaps.
Cyber Hygiene Awareness Training
Problem
Poor cyber hygiene practices such as clicking malicious links expose organizations to cyberattacks, data breaches, and financial losses.
Solution
Spoof email exercises are conducted to assess employee awareness, followed by customized cyber hygiene training programs.
Techno-Legal Documentation (NDAs)
Problem
The absence of non-disclosure agreements (NDAs) between employers and employees can be detrimental to an organization in the event of data leakage. Law enforcement may not pursue legal action (FIR) due to the lack of an NDA between the employer and employee.
Solution
• To address this issue, we conduct training sessions for employees on data leakage, emphasizing its impact on both the organization and the individual employee. • At the conclusion of these training sessions, we will facilitate the creation of NDAs between the employer and employee, using a techno-legal approach. • Employees will be educated on the importance of NDAs and the consequences of data leakage, and the agreements will be signed in a respectful and amicable manner. This ensures that employees understand the risks involved and are committed to maintaining confidentiality and data security.
