Best practices for securing manufacturing ERP software

Cybercriminals continue to wreak havoc on businesses across numerous industries. In 2017, these nefarious figures orchestrated more than 53,000 attacks against organizations worldwide, according to data security analysts for Verizon Wireless. This figure constitutes a total attack volume increase of almost 20 percent over data the carrier collected in 2016.

In the past two years, manufacturers have managed to avoid major interruptions linked to odious online activity. Businesses in the sector sustained only 536 total strikes in 2017, approximately 71 of which resulted in data loss. For comparison, firms in the public services space absorbed more than 22,000 attacks, with 304 leading to data loss. However, this state of affairs is changing.

Hackers are now beginning to target small and medium-sized businesses at higher rates, according to research from password management solution provider Keeper. This includes manufacturing firms, more than 95 percent of which fall into the SMB category, the National Association of Manufacturers reported.

Factories, in particular, have become targets of choice for the cybercriminals targeting smaller enterprises, CBS News reported. The businesses that operate these facilities maintain thin margins and cannot afford the costs that come with breach-related downtime, which can amount of hundreds of thousands of dollars per hour of stoppage.

With this in mind, manufacturing firms must reassess their existing data security protocols and implement refreshed defenses to protect mission-critical digital infrastructure, starting with enterprise resource planning (ERP) software.

These solutions drive core production activities by facilitating optimal data flow between key internal and external operational stakeholders. Downtime and data loss are likely to occur in the event that hackers infiltrate these platforms. So, how can manufacturers prevent such damaging incidents from unfolding?

Here are four best practices for protecting modern manufacturing ERP software:

Assign an ERP security stakeholder

The rise of cybercrime has forced organizations worldwide to create new executive leadership positions centered on data security. Individuals who take on these roles manage all backend information protection operations and promote safe system usage throughout the organization.

Manufacturing firms should adopt this model when addressing ERP security, according to IT Toolbox. By bringing in ERP stakeholders who are independent from existing information technology teams, firms can build in accountability and ensure that someone is considering the state of system data security protections at all times.

Implement patches as soon as possible

For many outside of the data security space, the word "hacker" brings to mind the image of an anonymous coder who leverages his or her superlative computational skills to tunnel into highly protected systems. There is, of course, some truth to this: Almost half of all attacks involve manual hacking, according to Verizon.

However, most larger data breaches are the result of easy-to-exploit system gaps linked to passive software patching strategies. This was the case with the Equifax breach that unfolded this past fall, Wired reported.

An estimated 143 million consumers lost their information to hackers as a result of the episode, which data security experts attributed to unpatched Java software. Manufacturing firms can easily avoid such an event by patching their ERP software when new data security updates are released.

Control system access

Of all the cyberattacks Verizon recorded in 2017, more than a quarter – 28 percent – involved internal actors who misused their system access to disrupt operations or steal information. Despite this, internal threat protection is a major blind spot for many modern organizations.

Firms often dole out solution credentials with little thought, giving employees at all levels the ability to view and potentially abscond with high-level company, customer or employee information. Manufacturing firms can prevent this kind of activity from unfolding within their ERP solutions by implementing strict system access controls.

This is one of the most effective strategies for protecting enterprise hardware and software, according to research from the SANS Institute. The group surveyed more than 270 IT experts, who collectively ranked access control among the top two data security best practices, second only to encryption. 

Work with a proven solution provider

While independently implemented data security strategies and tools can help repel cyberattacks and prevent breaches, such defensive tactics and implements are only effective when deployed in conjunction with sound software.

Even the most advanced IT best practices cannot protect porous systems built on shaky code. Manufacturers must remember this when developing methodologies for preventing ERP attacks and consider trading obsolete legacy platforms for newer solutions designed to function within today's digital threat environment.

Here at Accent Software, we help manufacturing firms and other businesses execute such swaps. As a certified Microsoft Business Solutions partner, Accent provides vendor-vetted Microsoft Dynamics NAV implementation services which allow organizations to put into place best-in-class ERP software and take advantage of cutting-edge data security protections only Microsoft can provide. Connect with us today to learn more about our offerings.