Effectively Mitigating Risks with OT Cybersecurity Insights

Industry 4.0 is driving unparalleled interconnectivity in manufacturing environments. Moreover, due to the criticality of operations, the manufacturing industry is highly targeted for cyberattacks. Traditional IT security is not enough to protect manufacturing organizations anymore. However, manufacturers often lack the expert knowledge and capacity needed to address the growing specter of cybersecurity threats in an effective way.

JDE needed a partner with the expertise to provide a comprehensive overview of all cybersecurity risks and vulnerabilities across its factories. This included all operational technology computing systems used to manage the entire industrial operation.

Jacobs Douwe Egberts (JDE)

Jacobs Douwe Egberts (JDE) is a global coffee and tea company formed following the merger of the coffee division of Mondelez International with Douwe Egberts. In 2017, a malware incident caused a computer outage across Mondelez’s global operations. The incident disrupted shipping and invoicing for several days, resulting in losses of €100M. This breach served as a catalyst for JDE to implement a cybersecurity program to address its operational technology (OT), including the industrial control system (ICS) environment across its factories worldwide.

JDE selected us for our comprehensive and integrated IT and OT cybersecurity solutions and services, supported by the capacity to assess all of JDE’s factories worldwide, with a uniform approach and within the time frame set out.

To assess the OT / ICS environments across JDE factories, we provided a team of specialists with deep knowledge of process control. Our experts used CGI’s proven OT security assessment methodology to provide insights into the maturity of the OT security policy in place and review its implementation. The assessment included site visits, structured interviews with key employees, examination of the factory against the IEC62443 standard, and an OT / ICS network topology scan.

• [Data Management - Cyber Security]
  

  Data from the plant supervisory, direct control and field level systems were evaluated to identify areas particularly vulnerable to cybercrime