Cyber threats, such as malware and data breaches, can significantly disrupt industrial operations, potentially causing severe consequences like environmental damage, production interruptions, or equipment breakdowns. At Outokumpu, the global leader in sustainable stainless steel, cyber security is seen as a critical element for business continuity, and it is systematically and continuously developed.
Proactive Protection is Key
In combating cyber threats, reaction is not enough – only proactive measures can prevent the most significant damage before it occurs. Outokumpu’s Chief Information Security Officer Petri Koivisto emphasizes that there are no simple or one-time solutions for ensuring cyber security. It’s essential to anticipate emerging threats and adapt protective measures accordingly.
"In industrial companies, where IT systems are directly linked to physical production processes, proactive protective actions must be particularly multidimensional and comprehensive," says Koivisto.
Maija Virta, who graduated engineer in information and communications technology from Jamk University of Applied Sciences and now works as a Cyber Assurance Specialist at Outokumpu, got interested in industrial cyber security as it combines the risks of both digital and physical worlds.
"In the industry, cyber security needs a holistic approach that integrates technology, processes, and human expertise," Virta describes.
Strong Cyber security is Built Through Collaboration
Cyber security isn’t solely a concern for IT departments in industrial companies; it requires everyone's participation across the organization and close collaboration with various stakeholders.
"Cyber threats and regulatory requirements are constantly changing. It’s challenging for any single company to keep up with all these changes alone," Virta points out.
Koivisto agrees with Virta:
"Collaboration with universities and other industry players is crucial. It allows sharing of best practices, identifying new threats, and developing more effective protective measures to secure critical operations."
According to Koivisto, the importance of collaboration is particularly emphasized for globally operating industrial companies with extensive and multi-stage supply chains. Cyber security significantly improves when the entire network is aware of cyber threats and how to mitigate them. However, a single weak link can jeopardize the entire supply chain. Koivisto further highlights that co-developing cyber security not only strengthens individual companies' defenses but also enhances the industrial sector’s overall capability to combat cyber threats.