--- title: "Cyber Criminals Are Targeting Your Industrial Controls: How to Protect Your Organization" description: Industrial control systems (ICS) are the backbone of modern manufacturing and critical infrastructure such as energy production and these systems are attractive targets for cybercriminals. Critical infrastructure and manufacturing capability are often targeted by cyber groups with nation-state support to create strategic geo-political outcomes. image: https://blog.ballastservices.com/hubfs/Cyber%20Security%20Concept.%20The%20Word%20of%20Red%20Color%20Located%20over%20Text%20of%20White%20Color..jpeg --- [![](https://blog.ballastservices.com/hubfs/raw_assets/public/ballast-website-theme/images/logos/logo_header.svg)](http://ballastservices.com) Services [About Us](https://23611281.hs-sites.com/about-ballast) [Insights](https://blog.ballastservices.com/it-insights) - [Cybersecurity Services](https://23611281.hs-sites.com/services/cybersecurity) - [Advisory Services](https://23611281.hs-sites.com/services/advisory-services) - [Professional Services](https://23611281.hs-sites.com/services/professional-services) - [Secure Managed Services](https://23611281.hs-sites.com/services/secure-managed-services) Risk Assessments + Penetration Testing + SOC Services + Threat Detection & Response + EDR + MDR + Vulnerability Management + Privileged Account Protection + Security Awareness Training Trusted Executive Advisors + Executive Partnership CIO/CISO + Merger + Acquisition  Flexible + Cost-Effective Project Services + Essential IT Design & Engineering + Cutting-Edge Automated Tools  + Stabilize, Optimize & Secure IT. Monitor + Secure IT + Improve IT + Expert Support [Get In Touch](http://ballastservices.com/contact-us) Menu + - Services - [Cybersecurity Services](https://23611281.hs-sites.com/services/cybersecurity) - [Advisory Services](https://23611281.hs-sites.com/services/advisory-services) - [Professional Services](https://23611281.hs-sites.com/services/professional-services) - [Secure Managed Services](https://23611281.hs-sites.com/services/secure-managed-services) - [About Us](https://23611281.hs-sites.com/about-ballast) - [Insights](https://blog.ballastservices.com/it-insights) [Get In Touch](http://ballastservices.com/contact-us) # Cyber Criminals Are Targeting Your Industrial Controls: How to Protect Your Organization [Ballast Services](https://blog.ballastservices.com/it-insights/author/ballast-services) Feb 8, 2023 1:00:00 PM ![Cyber Security Concept. The Word of Red Color Located over Text of White Color.](https://blog.ballastservices.com/hs-fs/hubfs/Cyber%20Security%20Concept.%20The%20Word%20of%20Red%20Color%20Located%20over%20Text%20of%20White%20Color..jpeg?width=1000&height=750&name=Cyber%20Security%20Concept.%20The%20Word%20of%20Red%20Color%20Located%20over%20Text%20of%20White%20Color..jpeg)Industrial control systems (ICS) are the backbone of modern manufacturing and critical infrastructure such as energy production and these systems are attractive targets for cybercriminals. Critical infrastructure and manufacturing capability are often targeted by cyber groups with nation-state support to create strategic geo-political outcomes. Taking control of these systems to inject ransomware or to gain remote control are the criminal’s primary goals. [The Colonial Pipeline incident in 2021](https://www.techtarget.com/whatis/feature/Colonial-Pipeline-hack-explained-Everything-you-need-to-know) is a textbook example of targeting ICS for criminal outcomes. Here's how these attacks are happening and what companies can do to protect themselves: - ICS systems are designed for reliability and stability, not for security. This makes them vulnerable to cyber attacks, especially those that exploit software vulnerabilities or use social engineering tactics. [CSO Online reports that 35% of the 923 CVEs released in the second half of 2022 had no patch or remediation available from the manufacturer](https://www.csoonline.com/article/3686131/many-ics-flaws-remain-unpatched-as-attacks-against-critical-infrastructure-rise.html). - Manufacturers of equipment which is managed by ICS controls are typically responsible for providing remote maintenance via VPN or other means. This creates an inherent risk to an organization’s threat surface due to the requirement of allowing 3rd party access to key equipment. - SCADA is a common protocol for ICS applications and this often requires complex SCADA over IP configurations which can create unintended issues with network segmentation that have security implications. - Malicious software: Malicious software, such as malware and even hacked [legitimate IT tools like RMM](https://ballastservices.com/ballast-blog/f/cyber-criminals-are-using-legitimate-it-rmm-tools-to-get-control) are frequently used to “Land and Expand” into a corporate network and then to gain access to ICS infrastructure. - Phishing: Phishing attacks are still the #1 most common tactic used by cybercriminals to steal login credentials, install malware and gain unauthorized access to ICS systems.   Protecting your company: To protect against these attacks, companies can implement the following security measures:   ICS systems are a key target of cyber-attacks, and companies need to take proactive measures to protect themselves. By following best practices, such as network segmentation, software updates, access control, employee education, and incident response planning, companies can reduce the risk of cyber-attacks and maintain the stability and reliability of their ICS systems. Engaging experts at Ballast systems who focus on providing solutions tailored to ICS infrastructure, give the companies layered security solutions to protect highly vulnerable yet business-critical ICS systems. Modernize, Optimize, Stabilize, and Secure your organization today. Contact us at 813-568-9011, visit our website at [https://ballastservices.com](https://ballastservices.com/), or click on Get In Touch to speak with us today. [Secure Managed Services](https://blog.ballastservices.com/it-insights/tag/secure-managed-services), [Professional Services](https://blog.ballastservices.com/it-insights/tag/professional-services) ## Read On [![](https://blog.ballastservices.com/hs-fs/hubfs/Imported%20sitepage%20images/rs=w1280-Jan-25-2023-05-43-59-9187-PM.jpeg?width=352&name=rs=w1280-Jan-25-2023-05-43-59-9187-PM.jpeg)](https://blog.ballastservices.com/it-insights/advanced-persistent-threats) ### [Advanced Persistent Threats](https://blog.ballastservices.com/it-insights/advanced-persistent-threats) Our nation is at war! Advanced Persistent Threat (APT) Actors are targeting government agencies... [![](https://blog.ballastservices.com/hs-fs/hubfs/Female%20hand%20wearing%20smartwatch%20with%20statement%20labels%20around%20and%20dark%20background.jpeg?width=352&name=Female%20hand%20wearing%20smartwatch%20with%20statement%20labels%20around%20and%20dark%20background.jpeg)](https://blog.ballastservices.com/it-insights/how-itil-based-change-management-helps-organizations-stay-secure) ### [How ITIL-based Change Management Helps Organizations Stay Secure](https://blog.ballastservices.com/it-insights/how-itil-based-change-management-helps-organizations-stay-secure) In today's business environment, technology is constantly evolving and organizations must adapt... [![](https://mma.prnewswire.com/media/1179007/Ballast_RMM.jpg?w=600)](https://blog.ballastservices.com/it-insights/ballast-services-announces-expansion-of-secure-it-managed-services) ### [Ballast Services Announces Expansion of Secure IT Managed Services](https://blog.ballastservices.com/it-insights/ballast-services-announces-expansion-of-secure-it-managed-services) [...](https://www.prnewswire.com/news-releases/ballast-services-announces-expansion-of-secure-it-managed-services-301073816.html) Back to Top [Get In Touch](http://ballastservices.com/contact-us) - [Cybersecurity Services](https://23611281.hs-sites.com/services/cybersecurity) - [Advisory Services](https://23611281.hs-sites.com/services/advisory-services) - [Professional Services](https://23611281.hs-sites.com/services/professional-services) - [Secure Managed Services](https://23611281.hs-sites.com/services/secure-managed-services) - [About Us](https://23611281.hs-sites.com/about-ballast) - [Insights](https://blog.ballastservices.com/it-insights) (888) 450-4322 | 3689 Tampa Rd Suite 340, Oldsmar, FL 34677 Copyright © 2023 Ballast Services Inc. All Rights Reserved.  [Privacy Policy.](https://23611281.hs-sites.com/privacy-policy) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Ballast Services", "url" : "https://blog.ballastservices.com/it-insights/author/ballast-services" }, "dateModified" : "2023-02-22T14:26:27.329Z", "datePublished" : "2023-02-08T18:00:00.000Z", "headline" : "Cyber Criminals Are Targeting Your Industrial Controls: How to Protect Your Organization", "image" : [ "https://blog.ballastservices.com/hubfs/Cyber%20Security%20Concept.%20The%20Word%20of%20Red%20Color%20Located%20over%20Text%20of%20White%20Color..jpeg" ], "mainEntityOfPage" : { "@id" : "https://blog.ballastservices.com/it-insights/cyber-criminals-are-targeting-your-industrial-controls-how-to-protect-your-organization", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://blog.ballastservices.com/hubfs/ballast-tagline-blue-1.png" }, "name" : "Ballast Services" } } ```