Operational Technology Cyber Health Check

Your operational technology systems may be more vulnerable than you think

In July 2023, the port of Nagoya in Japan was hit by a ransomware attack that forced a network shutdown and caused data loss — disrupting port services and associated business operations for three days.¹  

Cyberattacks such as this demonstrate the vulnerabilities when operational technology (OT) and information technology (IT) converge with a consequent increase in endpoints and are not adequately segmented — increasing the risk of significant business disruption and physical damage to hardware, triggering financial loss and liabilities, regulatory penalties, and reputational damage when cybersecurity incidents occur.

Is your organisation at risk? Those with ageing hardware and legacy operating systems are especially vulnerable, as are organisations with IT and OT teams working in silos. Taking a comprehensive and validated cybersecurity assessment on your OT and industrial control systems (ICS) is the most effective way to identify gaps that serve as ‘open doors’ for cyberattackers to strike.

Introducing Marsh Asia’s Operational Technology Cyber Health Check

Developed based on leading practices including the NIST Cyber Security Framework, NIST 800-82 (ICS Security), ISO/IEC 27001 and ISA/IEC 62443 standards, Marsh Asia’s Operational Technology Cyber Health Check is a comprehensive, 4-stage assessment designed to help your organisation reinforce the resilience of its OT and ICS and achieve these four key outcomes:

• Assess the implementation and effectiveness of your cybersecurity controls.
• Document good practices and areas for improvement.
• Obtain recommendations to improve your cybersecurity posture.
• Streamline information gathering to address insurer queries.

Beyond helping to improve your cybersecurity posture and resilience of your OT and ICS, our specialists’ recommended actions can help you formulate a roadmap for more robust enterprise risk management (ERM) and better address insurer queries amidst challenging market conditions or tightening terms and conditions by insurers.