I oT future

state
development
Safely embracing the Industrial
Internet of Things (IIoT)

KPMG International

kpmg.com
‘Smart factories’ are forging
a revolution that’s
redefining the way things
are produced
The IIoT is being heralded as a paradigm shift that will transform the way things are pro-
duced. Beyond delivering crucial new business benefits and competitive advantages, the
IIOT will require organizations to adopt strategic approaches to effectively manage emerg-
ing new cyber security risks. In the article below, KPMG provides an overview of what’s
unfolding and some insights on how businesses should be approaching the revolutionary
changes — and new risks — that are emerging around them.

With the Internet of Things (IoT) poised to create an Today’s corporate and industrial networks are relatively
unprecedented explosion of smart device connectivity — contained, manageable and predictable. But the IIoT
connecting billions of internet products and generating an transforms the risk and threat landscape, as industrial
endless array of data — the application of IoT concepts to automation and control systems — once isolated and secure —
industrial environments is forging a revolution of its own that are increasingly connected to corporate networks and the
will transform the way things are made. internet. Individual devices across enterprise Information
Technology (IT) and Operational Technology (OT) networks —
The IIoT — automation and data exchange in manufacturing
from smart digital equipment and tools to robots, vehicles and
technologies — is the primary force behind what’s being called
more — will present potential new pathways to cyber attack,
the fourth industrial revolution or Industry 4.0, the creation of
including malicious data infiltration, denial of service (DoS)
‘smart factories’ that combine cyber-physical systems, the IoT
attacks and devastating proliferation of malware or viruses.
and cloud computing.
Industrial organizations are already turning to the IIoT for
Businesses are facing new challenges on the
real-time access to endless amounts of operational data and
cyber security front
new analytics capabilities, all delivered at unprecedented As the IIoT environment explodes to create Industry 4.0 and
levels of speed, accuracy and efficiency. Immense new all of its anticipated benefits and competitive advantages,
production, operational and supply-chain advantages are rapidly organizations will also need to adopt strategic approaches and
emerging for businesses amid vastly improved connectivity, innovative architectures that foster reliable, safe, secure work
information sharing, scalability and time and cost savings environments. To that end, organizations should already be
across every automated work process. From executive offices addressing some key questions about IIoT security, including
and production floors to suppliers and other stakeholders, what their immediate priorities are for IIoT capabilities, the level
networks of emerging smart devices are breaking down of automation needed for machine-to-machine communication,
traditional data silos and instantaneously connecting people, and the appropriate security program and architecture required
processes and technologies. to secure the IIoT environment.

But as the IIoT, like the Internet of Things, opens an uncharted It’s also important for businesses to quickly understand that
new frontier of enterprise-wide connectivity, automation, data IIoT cyber security is not simply a new problem for the IT team
and results, it becomes critical for organizations to understand or the OT folks to manage but an overarching business issue
what’s in store in terms of the emerging cyber security risks that warrants the full attention of senior leaders. Executives
that will need to be managed. and boards can therefore begin acting as ‘agents of change’

2 | IIoT future state development

© 2017 KPMG International Cooperative (“KPMG International”). KPMG International provides no client services and is a Swiss entity with which the independent member firms of the KPMG network are affiliated.
on the IIoT front today, becoming fully informed and driving with marketing-leading knowledge of emerging IIoT threats and
collaboration across the enterprise to produce appropriate new vulnerabilities. KPMG member firms work closely with clients
cyber security measures. to create a unique IIoT security strategy and architecture that
minimizes risk and supports your organization’s mission within
KPMG’s approach to developing a secure IIoT future state
a stable and predictable environment.
combines a sound understanding of your business objectives

Developing a business-focused cyber

security roadmap to capture and
support your strategic vision

Undertaking a strategic assessment

of current security capabilities to
create a customized risk profile

Ownership & accountability around

IIoT cyber risk

We take a ‘modular approach’ to each security solution, support your strategic vision. This includes collaboration with
precisely identifying and mapping out logical, sequential stakeholders to identify gaps in their ecosystems that could
steps that produce increasing levels of IIoT cyber security. inhibit your security program.
Our strategy on every project therefore includes: determining
With KPMG firms’ help, companies are replacing uncertainty
ownership and accountability around IIoT cyber risk;
with confidence in their industrial cyber security strategies and
undertaking a strategic assessment of current security
embracing new opportunities without fear of a crippling cyber
capabilities to create a customized risk profile; and developing
event as Industry 4.0 unfolds.
a business-focused cyber security roadmap to capture and

Where to begin? As your organization faces the challenge of implementing IIoT, begin by
exploring some key questions

—— What are your organization’s immediate priorities for IIoT capabilities?

—— What level of control and automation will your M2M communications technology perform?
—— How will IIoT data be collected, stored and transmitted and into what classification category will the data fall?
—— Do proven technologies exist for applications under consideration?
—— How will M2M communications technology address challenges such as data encryption, network access control and
signal interference?
—— What security mechanisms, if any, are being provided with IIoT-enabled devices and are you receiving current threat and
vulnerability information for each?
—— What external factors (environmental, regulatory, etc.) might affect reliable data transmission from one end point to
another?
—— Have you considered both cyber security and physical security for this deployment?
—— What ongoing improvements, updates and maintenance will you conduct or receive from vendors?

IIoT future state development | 3

© 2017 KPMG International Cooperative (“KPMG International”). KPMG International provides no client services and is a Swiss entity with which the independent member firms of the KPMG network are affiliated.
Contacts

Dani Michaux
Lead, Global Industrial Internet of Things
Cyber Security
KPMG International
T: +60377213388
E: [email protected]

John Hermans
Lead, Cyber Security Services, Europe,
Middle East and Asia
KPMG in the Netherlands
T: +31 (0)6 51 36 63 89
E: [email protected]

kpmg.com
kpmg.com/socialmedia

The information contained herein is of a general nature and is not intended to address the circumstances of any particular individual or entity. Although we
endeavor to provide accurate and timely information, there can be no guarantee that such information is accurate as of the date it is received or that it will continue
to be accurate in the future. No one should act on such information without appropriate professional advice after a thorough examination of the particular situation.
© 2017 KPMG International Cooperative (“KPMG International”), a Swiss entity. Member firms of the KPMG network of independent firms are affiliated with
KPMG International. KPMG International provides no client services. No member firm has any authority to obligate or bind KPMG International or any other
member firm vis-à-vis third parties, nor does KPMG International have any such authority to obligate or bind any member firm. All rights reserved.
The KPMG name and logo are registered trademarks or trademarks of KPMG International.
Designed by Evalueserve.
Publication name: IIoT future state development
Publication number: 134278-G
Publication date: May 2017