Security threats are everywhere and since the exposure and attack surface at the edge is larger compared to traditional enterprise environments, this brings additional complexities when deploying edge infrastructure.
Furthermore, according to market intelligence firm IDC, 50% of IT infrastructure will be deployed at the edge by 2023 and the edge is therefore high on many CxO agendas.
- Further predictions from IDC are that the financial impact of cyber physical systems (CPS) attacks resulting in fatal casualties reach over $50 billion by 2023. Even without considering the value of human life, the costs for organizations in terms of compensation, litigation, insurance, regulatory fines, and reputation loss will be significant. Gartner also predicts that most CEOs are personally liable for such incidents.
- The US National Cybersecurity Strategy 2023 is shifting from consumers to suppliers when it comes to liability for security incidents.
- The EU GDPR rules dictate that data breaches must be reported to authorities within 72 hours after the detection. Failure to comply with data protection rules may result in disciplinary sanctions for EU businesses. These rules all focus on accountability, and that means that institutions and companies are liable for the data they process.
Security investments are rising, but the attack surface is also getting bigger and the understanding for many enterprises as not being "if", but more "when" a breach happens.
Security incidents in operational technology (OT) and other industrial control systems (ICS) have three main motivations for the attackers: actual harm, commercial vandalism (reduced output), and reputational vandalism. The effect of breaches against these systems can result in reputational damage.
In the US, Executive Order (EO) 14028 introduced new regulations for companies supplying products or services containing software to U.S. government agencies and the Cybersecurity Act currently under development strengthens the EU Agency for Cybersecurity (ENISA). Both pieces of legislation establish a cybersecurity certification framework for products and services that reduce damage to consumers and enterprises.
This white paper introduces the key features and design considerations needed to enhance security for edge assets. It explains how Dell Technologies is approaching edge security in designing Dell NativeEdge-an edge operations software platform. This white paper explains how Dell NativeEdge will comply with industry standards and legislation to reduce customers vulnerability to security breaches and threats.