The post Genetec enhances Security Center SaaS with the addition of intrusion management appeared first on Nextro.

Nextro’s in-depth knowledge of Fortinet’s Secure SD-WAN technology, combined with its extensive experience in cybersecurity, enables the company to provide comprehensive solutions that meet the specific needs of its clients. This includes secure connectivity, optimised application performance, and simplified management – all while reducing costs and enhancing security.

“Nextro has consistently demonstrated its ability to deliver innovative and secure networking solutions. We are excited to see how their expertise in Fortinet’s Secure SD-WAN technology will benefit their clients and contribute to the overall cybersecurity landscape across Australia and New Zealand,” said Nick Frantzen, Service Creation Manager at Fortinet New Zealand.

In a fast-paced industry, specialisations focused on market opportunities enabled by the Fortinet Engage Partner Program help partners be recognised and valued by current and potential customers as trusted advisors who have the expertise, services and technologies they need to meet their digital acceleration needs.

With this specialisation, Nextro is now positioned to offer even greater value to its clients, helping them stay ahead in an increasingly challenging cybersecurity environment. The Fortinet specialisation means that Nextro understands convergence and the value of maximising a secure networking approach for digital acceleration for customers.   

Click here for more information on Nextro’s SD-WAN offering.

A wall of Fortinet firewall boxes from one of Nextro’s recent 50+ site SD-WAN deployments.

The post Nextro Achieves Fortinet SD-WAN Specialisation appeared first on Nextro.

On a busy event day, Eden Park welcomes about 50,000 spectators. Find out how the team has expanded visibility to keep guests safer, all while developing stronger city partnerships to streamline operations and incident response.

The company

Eden Park is widely considered New Zealand’s national stadium. Since its opening in 1903, the stadium has been the home of Auckland Cricket and Auckland Rugby. It has a seating capacity of nearly 50,000 and an unmatched atmosphere for live events. As New Zealand’s largest stadium, Eden Park has a proven track record of delivering successful events for over a century. This includes the 1987 and 2011 Rugby World Cup finals as well as the 2022 ICC Women’s Cricket World Cup and others.

The challenge

Over one million local and international fans pass through Eden Park’s doors each year. High-volume patronage means the stadium needed a security platform that could help the team proactively safeguard against threats. This became important following the release of the New Zealand Government’s Crowded Places Strategy in 2020 and Eden Park becoming the host of the FIFA Women’s World Cup 2023.

The solution

Boosting stadium-wide visibility

Operators now have a clear picture of stadium events. With privacy-first visual tracking and quick search functionality, identifying and responding to security alerts can happen in seconds.

Gaining real-time insights

The AutoVu ANPR system helps operators automatically track vehicle license plates, comparing them against the live law enforcement database of stolen vehicles or vehicles of interest.

Achieving full redundancy 

Dual directory servers and four Streamvault security infrastructure appliances operating in high-availability mode mean Eden Park has certainty of continuous operation for game day. 

Enhancing city-wide collaboration

Using the Genetec Federation feature, Eden Park can grant system access to the New Zealand Police in case of emergencies. This enables authorities to rapidly respond to stadium incidents.

“Eden Park is committed to delivering world-class live experiences and attracting premium events for Auckland and New Zealand. With centralized security operations underpinned by Genetec, we’re able to continue setting the benchmark for stadium experiences in the wider APAC region.” 

Nick Sautner

Chief Executive Officer at Eden Park

Results

With the Genetec platform at hand, Eden Park operators can now monitor crowds, address safety concerns, and coordinate incident responses from centralized spaces. Eden Park now has a unified view of security, backed by infrastructure appliances that have been tested to their limits and tailored to the stadium’s unique requirements. This added level of reliability eliminates guesswork and offers invaluable peace of mind.

The post Nextro and Genetec partner with Eden Park for enhanced security operations appeared first on Nextro.

Critical infrastructure industries such as energy, water supply, healthcare, and transportation are the backbone of our society. They are crucial to ensuring public safety, economic stability, and country security.   

As critical infrastructure managers continually embrace digital transformation, their corporate (IT) and operational (OT) networks must be able to efficiently manage large volumes of data, and the growing number of IoT devices, while securely integrating operational technologies, security equipment, and other devices with their systems. To keep their operations running seamlessly, critical infrastructure organisations rely heavily on robust, high-speed, efficient, and secure network solutions/architecture.  

At Nextro, we understand that ensuring the reliability, operations, and security of critical infrastructure networks is of utmost importance not only for the organisations but the entire community.  To this end, Nextro partnered with Arista Networks, an industry leader in data-driven, client-to-cloud networking for large data centre/AI, campus, and routing environments, to provide innovative network solutions tailored to meet the dynamic and growing demands of the critical infrastructure sector.  

This article explores the importance of safeguarding critical infrastructure networks and how Arista Networks’ advanced switches and network solutions enable critical infrastructure organisations and managers to enhance their network availability, agility, automation, analytics, and security. 

Arista’s solutions for critical infrastructure networks 

Arista Networks is at the forefront of providing innovative cloud networking solutions to meet the highest performance, reliability, and security standards necessary for critical infrastructure operations. Their solutions include Extensible Operating System (EOS), network applications, and Ethernet switching and routing platforms.    

Check here how Arista’s solutions and Nextro can help critical infrastructure organisations: 

1. High-Performance Switches 

Arista’s switches are designed for high-performance, offering scalable bandwidth from 1Gbps to 400Gbps. They provide ultra-low latency, high throughput and scalability, ensuring real-time data processing essential for critical infrastructure operations that demand reliable, high-speed data transmission. Below are the two models of Arista’s high-performance switches that meet the needs of critical infrastructure and can be supplied by Nextro in New Zealand & Australia:   
 

• 7000 series switches: designed for high-frequency trading, cloud data centres, and large enterprise environments. They support 10/25/40/50/100 Gigabit Ethernet and are known for their modularity and high-density configurations.   

• 7500R series switches: engineered for the most demanding data centre environments. They offer exceptional performance, support for up to 400 Gigabit Ethernet and features designed to handle massive amounts of data traffic with minimal latency. 

2. Extensible Operating System (EOS) 

Arista EOS is a highly modular and fully programmable operating system that delivers workflow automation, high availability, unparalleled network visibility and analytics capabilities.   

Arista EOS integrates seamlessly with a wide range of third-party applications, automation tools, and scripting languages, enabling network administrators to customise and automate network functions and workflows. It can also scale to hundreds of thousands of compute and storage nodes with management and provisioning capabilities that work at scale.   

EOS ensures optimal network performance and troubleshooting issues by harnessing advanced features, including analytics, network telemetry, and real-time monitoring.   

Designed for resiliency and programmability, Arista EOS provides a robust software foundation and allows for solutions customised to the specific needs of critical infrastructure sectors, ensuring optimal performance and security. 

3. CloudVision: Unified Management and Automation 

Managing complex network environments can be challenging, particularly in critical infrastructure organisations. Arista’s CloudVision platform offers unified management, simplifying network operations and enhancing security. CloudVision’s real-time telemetry and analytics enhance network visibility, monitoring, and control.   

CloudVision’s centralised approach enables network administrators to oversee and efficiently manage complex and large-scale deployments from a single interface, reducing operational complexity, improving response time and mitigating risks.  

The platform leverages cloud networking and integrates various automation tools and orchestration frameworks, enabling streamlined operations and reduced manual intervention. At Nextro, we know that this is crucial for maintaining high availability and scaling infrastructure in response to changing demands. 

4. Virtual Extensible LAN (VXLAN) 

Arista’s VXLAN technology enhances network segmentation, vital for isolating sensitive data and protecting critical systems. By segmenting the network, organisations can minimise the impact of potential breaches and effectively contain threats.

Benefits of Arista’s Network Solutions for Critical Infrastructure 

Nextro can help its critical infrastructure customers achieve the following benefits when deploying Arista switches and other solutions: 

1. Improved Operational Efficiency 

With high-performance switches and routers, Arista network solutions cater to the demanding requirements of critical infrastructure. Their devices provide high-speed data transmission with minimal latency and maximum throughput, allowing critical infrastructure organisations to enhance operational efficiency, reduce downtime, and ensure continuous and reliable service delivery. 

2. Scalability and Flexibility 

Critical infrastructure systems must often scale quickly to accommodate growing demands or integrate new technologies. Arista’s software-driven solutions allow critical infrastructure organisations to adapt and expand their networks without compromising performance. The flexibility and scalability of Arista’s solutions, such as EOS (EOS), enable seamless integration with existing systems and technologies, ensuring that critical infrastructure can scale and evolve without disruption. 

3. Proactive Threat Detection and Response 

With the real-time telemetry and analytics capabilities offered by Arista’s CloudVision platform, organisations can proactively detect anomalies and threats to their networks. This allows them to respond swiftly to potential incidents, minimise damage, and ensure rapid recovery. 

4. Enhanced Security 

Critical infrastructure networks are exposed to various cybersecurity threats, which can cause significant disruptions to their operations, compromise the availability and integrity of vital services, and lead to catastrophic consequences. Therefore, security is paramount in critical infrastructure.   

Arista Networks incorporates advanced security features into its solutions, including segmentation, encryption, and real-time threat detection. By leveraging these capabilities, Nextro helps organisations protect their networks from cybersecurity threats and unauthorised access, safeguarding vital operations and sensitive data. 

Protecting critical infrastructure networks from cybersecurity threats is essential to ensure the uninterrupted delivery of vital services and the safety of our society. At Nextro, we understand the challenges these industries face and provide best-of-breed solutions to meet their needs.  

Together with Arista Networks, Nextro delivers advanced switches and comprehensive network solutions that provide the security, reliability, and performance needed to safeguard critical infrastructure. By leveraging Arista’s innovative networking solutions, organisations can enhance their resilience against cybersecurity threats, ensuring the continued operation and security of the services we rely on daily.  

To learn more about how Arista’s solutions can elevate your network, operations, and security, get in touch with the Nextro team today. We are ready to help you implement the right best-of-breed solutions to optimise the operation of your critical infrastructure while at the same time meeting your security needs. Nextro is a certified and trained Arista Networks partner.   

The post Elevate critical infrastructure networks with Nextro and Arista appeared first on Nextro.

According to a recent global survey released by Fortinet, 31% of organisations with OT environments reported over six intrusions in the past year, a significant increase from the 11% reported the previous year.   

This alarming finding shows that despite growing efforts and investments to bolster their security posture, organisations still face significant challenges when securing integrated IT/OT environments. 

In this article, we cover the main OT cybersecurity challenges highlighted by Fortinet’s 2024 State of Operational Technology and Cybersecurity Report and provide some insights on the best practices for enhancing your OT security posture.    

Cyber Threats to Operational Technology Environments  

Traditionally kept isolated from other environments, most OT systems were not designed for today’s increased network connectivity. As organisations integrate new digital technologies into their OT environments, security challenges become more complex. 

Threats to OT environments can come from numerous sources, including terrorist groups, disgruntled employees, malicious intruders, natural disasters, actions by insiders, and unintentional actions such as human error or failure to follow established policies and procedures. Attackers are developing more sophisticated tactics and tools to penetrate OT protocols and systems.  

To ensure the safety of their OT systems, organisations must adopt essential tools and capabilities to enhance visibility and protection across the entire network, reducing the time for attack detection and response, as well as the overall risk for these environments. 

Key Findings from Fortinet Report 

1. Cyberattacks that compromise OT systems are on the rise. 

This year, 73% of organisations reported intrusions that impacted either OT systems only or both IT and OT systems, a sharp increase from only 49% in 2023. 

Findings also showed an increasing number of organisations experiencing a high volume of intrusions. Over 30% of respondents had six or more intrusions, up from only 11% in 2023. 

2. Email attacks and mobile security breaches are the main attack techniques.   

Phishing and compromised business email were the most common attack types in the last year, affecting 76% and 65% of the organisations. Additionally, ransomware and wiper intrusions saw a spike in activity, rising from 32% in 2023 to over 55% in 2024.  

Cybercriminals’ most common techniques for gaining access to OT environments were mobile security breaches and web compromises.  

These findings highlight the importance of organisations investing in cybersecurity awareness training for their team members, making them a key component of your business’s strategy to fortify your company’s defences.  

3. Organisations have experienced increased damage from intrusions. 

The damages caused by intrusions have also gotten worse for organisations. More than half of respondents (55%) reported degradation of brand awareness due to a successful attack. Findings also showed an increase in organisations that reported lost business-critical data and decreased productivity due to a breach incident.  

Given the rise in attacks and extension of their damages, nearly half (46%) of respondents indicate that they measure success based on the recovery time needed to resume normal operations. That suggests that for many organisations, quickly responding to inevitable attacks may be a more realistic target to measure their cyber resilience success.  

4. Organisations have a more mature OT security posture  

As OT threats become more sophisticated, the report suggests that most organisations still have blind spots in their environment. While there has been a decrease in organisations claiming to have complete visibility of their OT activities within central cybersecurity operations compared to the previous years, the number of organisations reporting that they have 75% visibility increased. This suggests that organisations are gaining a more realistic understanding of their security posture and becoming more aware of their blind spots.  

5. OT Cybersecurity has become a high-rank responsibility 

The percentage of organisations aligning OT security with the CISO increased to 27% this year, compared to 17% in 2023.  

Findings also indicate a growing trend of transferring OT responsibility to other C-suite roles, such as the CIO, CTO, and COO, with an expected increase to about 60% in the next 12 months. This indicates a clear concern for OT security and risk in 2024 and beyond. 

Also, in organisations where the CIO is not responsible, these responsibilities are shifted from the Director of Network Engineering to the Vice President of Operations role, illustrating another escalation of responsibility. 

This elevation into the executive ranks indicates that OT security is becoming a higher-profile topic and gaining more attention at the board level. 

Best practices to enhance OT security 

The results of the Fortinet report show us the urgent need for effective security measures. 

Based on these findings, the Nextro team has compiled the best practices to address OT security challenges and strengthen its security posture.   

Implement network segmentation 

To minimise intrusions, it’s crucial to establish a fortified OT environment with robust network policy controls at every access point. This defensible architecture begins with creating distinct network zones or segments. Additionally, teams should assess the complexity of managing these solutions and consider the advantages of an integrated or platform-based approach with centralised management capabilities. 

Enhance Visibility and Apply Compensating Controls for OT Assets 

Visibility into all assets on the OT network is essential. Once visibility is achieved, organisations must protect any vulnerable OT devices with purpose-built compensating controls. These controls should include protocol-aware network policies, system interaction analysis, and endpoint monitoring to detect and prevent the compromise of sensitive OT assets.  

Integrate OT into Security Operations and Incident Response 

Organisations should integrate OT considerations into their overall SecOps and incident response plans. This involves creating playbooks that specifically address the OT environment, ensuring comprehensive incident management and response. 

Utilise OT-Specific Threat Intelligence and Security Services 

Effective OT security relies on timely awareness and precise analysis of emerging threats. Organisations should ensure their threat intelligence and content sources are rich with OT-specific information, enhancing their ability to respond to imminent risks accurately. 

Adopt a Platform Approach to Security Architecture 

To tackle the dynamic nature of OT threats and the growing attack surface, organisations often deploy numerous security solutions from various vendors, leading to complexity. A platform-based approach can streamline this by consolidating vendors and simplifying the security architecture. A robust platform designed to safeguard both IT and OT environments enables solution integration, improving security efficacy and allowing centralised management to boost efficiency. 

With the rise of more sophisticated and complex OT security threats, organisations must adopt comprehensive and proactive cybersecurity strategies to safeguard their OT environments. 

At Nextro, we stand at the forefront of cybersecurity innovation, offering best-of-breed solutions specifically designed to protect OT and IT infrastructure effectively. Our solutions enable organisations to enhance their security and mitigate risks.  

If you would like to learn more about safeguarding your OT network, or have general networking or cybersecurity questions, please get in touch with the Nextro team today. 

To download your copy of the Fortinet 2024 State of Operational Technology and Cybersecurity here.

The post OT environments are facing increasing cyber attacks appeared first on Nextro.

The rise of artificial intelligence (AI) has sparked both excitement over its potential and concerns about its risks. As AI technology continues to evolve, various industries around the globe are exploring its potential applications.  

AI, which includes machine learning (ML), deep learning (DL), and rule-based expert systems (RBES), has the potential to revolutionise the security, operations, and health and safety of critical infrastructure, industrial sites, retail, and other industries.  

At Nextro, we are already leveraging AI, ML and video analytics to help our customers gain operational leverage and efficiency.  

In this blog post, the Nextro team shares some of its learnings to date, and takes an in-depth look at the benefits of leveraging artificial intelligence and machine learning video analytics solutions to enhance physical security, operational efficiency, as well as health and safety compliance.  

Enhancing Physical Security with AI  

AI physical security applications enable security teams to perform their duties more efficiently and accurately across large datasets. Some well-known examples include:  

• Video Analytics: AI can analyse real-time video feeds to quickly identify unusual activities from people or vehicles such as loitering or intrusion, allowing security operators to focus on other tasks, increasing overall efficiency.  
• Face Recognition: AI systems can use biometric data to locate or recognise a person in real-time or from video archives. This is especially useful for law enforcement, retail crime prevention, or VIP use cases. It also can be used to generate highly-accurate dwell-time statistics 
• People Counting: Automating the counting of people in airports, train stations, stadia, large-footprint retail environments, and businesses aids in managing occupancy, monitoring queues, and alerting staff when necessary. This data assists in enhancing crowd control and understanding peak travel times in transit.  
• Traffic Flow Management: Using advanced AI technology, traffic flow is effectively managed at large venues, hospitals, and city areas. The system detects backups, promptly alerts staff to any issues, and seamlessly re-routes traffic or adjusts signage as needed to ensure optimal flow.  
• License Plate Recognition: Recognising license plates assists in investigations and enables touchless parking payment systems.  
• Object Detection: AI is used to detect objects to secure perimeters at critical infrastructure facilities, prevent smuggling in correctional facilities, and identify left luggage or bomb threats at airports and train stations.  
• Data Integration: AI systems have the capability to seamlessly integrate with diverse data sources including airport baggage systems, logistics systems, and smart building systems. This integration allows for the analysis, prediction, and proactive response to specific business situations. The data can also be seamlessly outputted to an enterprises own data lake and business intelligence systems for further analysis and reporting.  

Securing critical infrastructure and industrial sites from intrusion, theft, and sabotage is just the initial measure to safeguard production and operations. Sustaining ongoing operations also depends on a strategic and proactive approach to operational efficiency, adhering to health and safety regulations, and ensuring compliance with regulatory requirements.  

AI’s Role in Enhancing Health and Safety  

AI-powered solutions offer far more than traditional methods to minimise disruptions, improve operational efficiency, and enhance health and safety procedures. From risk assessment to accident prevention, AI is reshaping how companies approach and implement health and safety practices.  

AI & Video Analytics Systems for Enhanced Safety Compliance  

The new generation of network cameras, thermal sensors, and access control systems, when paired with AI and analytics technologies, efficiently collect and analyse vast amounts of data. This results in faster and more effective safety interventions, not just in real-time events, but also for future protection, raising the bar for long-term site health and safety procedures.  

Key Applications: 

• Personal Protective Equipment (PPE) Detection: AI can detect and confirm the presence or absence of required PPE, enabling workplaces to issue corrective actions and link to access control systems to prevent site access without proper PPE.  
• Restricted Area Monitoring: AI helps prevent incidents in restricted areas and confined spaces. Sensors can trigger equipment shutdowns and alert operations when detecting a person within a risk zone.  
• Early Fire Detection: AI supports fire detection with early recognition of smoke and fire, allowing prompt action.  
• Man-Down Detection: Analytics monitor the working environment for slips, falls, or collapses, mitigating risks in lone-worker scenarios and enabling swift response to incidents.  
• Blocked Exit Notification: AI systems, when paired with well-placed cameras, can detect objects blocking emergency exits or evacuation areas and send alerts. This reduces reliance on a human patrol of the back-of-house corridors and emergency egress points, saving time and money and allowing human resources to focus on more important tasks.  
• Leak Detection: AI monitors pipes, tanks, and equipment, sending alerts regarding potentially dangerous leaks using thermal technology.  
• Safety Regulations Compliance: AI analytics systems can automatically detect potential safety hazards, such as workers not wearing protective gear/PPE or unauthorised personnel in restricted areas, allowing prompt intervention and corrective actions.  

Utilising AI in High-Risk Sectors 

AI integration in high-risk fields exemplifies its potential to mitigate issues, create safer environments, and revolutionise approaches to challenging tasks in critical industries:  

• Predictive Maintenance in Manufacturing: AI-driven systems use sensor data and ML algorithms to forecast equipment failures before they occur, enabling proactive maintenance, reducing downtime, and minimising accident risks.  
• Hazard Detection in Mining: AI-powered drones with advanced sensors and computer vision capabilities can survey mine sites and detect safety hazards, such as unstable terrain or toxic gas leaks, prioritising worker safety and enabling prompt threat response.  

Wearable Devices and Sensors for Worker Health Monitoring  

Specialised wearable devices are indispensable in safeguarding worker health in hazardous environments. In industries like construction, mining, and manufacturing, smart helmets equipped with sensors detect harmful gases, monitor environmental conditions, and assess potential head injuries. These wearables can automatically trigger alerts or emergency responses in case of accidents, ensuring timely assistance and preventing severe consequences. 

Disaster Response and Rescue Operations  

In high-risk situations, such as natural disasters or search-and-rescue operations, AI-powered drones and robots aid first responders in assessing situations, locating survivors, and navigating hazardous environments. These technologies enable more effective disaster response and help protect the safety of rescue teams.  

AI has significantly impacted workplace security and safety through its practical applications, paving the way for a future where protection and progress are intrinsically linked. The adoption of AI for health and safety in the workplace marks a significant shift in today’s organisations. AI-driven solutions offer predictive maintenance, real-time risk assessments, virtual reality training, and wearable devices to enhance workplace safety, mitigate risks, and boost productivity.  

By identifying safety hazards and empowering workers with AI-driven insights, organisations can foster a culture of prevention, creating a collaborative work environment where technology complements human capabilities.  

If you want to know more about how to use artificial intelligence, machine learning and camera analytics to safeguard your organisation, dramatically increase operational efficiencies, surface up business insights, and improve health and safety compliance, please get in touch with the Nextro team now.   

Sources: https://itbrief.com.au/story/ai-in-physical-security-opportunities-risks-and-responsibility
https://www.thedigitalspeaker.com/transformative-role-ai-revolutionising-workplace-health-safety/

The post Harnessing AI solutions for security, operational efficiency, and health and safety compliance  appeared first on Nextro.

Axis Gold Partner, Nextro, takes out two awards at the annual Oceania Axis partner summit in Denarau Island, Fiji.

Auckland, New Zealand, 15 May 2024 – Nextro, the New Zealand security integrator and managed network and security services provider, was awarded the Fastest Growing Partner of the Year – New Zealand award as well as the Partner of the Year for the Transportation category – New Zealand at Axis Oceania Partner Awards 2024 in Denarau Fiji on 6-9 May 2024. 

The award recognises Nextro’s rapid growth in the physical and electronic security market in New Zealand especially in the sectors of transportation and critical infrastructure where Nextro has deployed and integrated smart cameras, speakers, door controllers, and intercoms from Axis Communications.

“These two awards are recognition of the Nextro team’s successful rollouts of market-leading electronic security and operations solutions for tier one customers in the transportation and critical infrastructure sectors in New Zealand. The outcomes that our Nextro and customer teams have delivered include benefits and efficiencies across security, operations, and health and safety. We are honoured to receive the recognition from our partner Axis Communications,” said Martyn Levy, Nextro’s Managing Director.

“As technology continues to advance at an unprecedented pace, the role of collaborative innovation has never been more crucial. Nextro’s commitment is the backbone of our ability to offer industry-leading innovations that meet the dynamic needs of businesses. Together, we have turned obstacles into opportunities, setting new benchmarks in the industry. This synergy is not just our strategy, but our competitive edge, ensuring we remain at the forefront of security advancements,” said Wai King Wong, Regional Director for Oceania at Axis Communications.

The post Nextro wins NZ Fastest Growing Partner & Transportation Sector categories at Axis Oceania Partner Awards 2024 appeared first on Nextro.

In recent years, the acceleration of digital transformation has promoted the convergence of corporate/information technology (IT) and operational technology (OT) networks and opened up a realm of opportunities for organisations.  

IT/Corporate networks encompass an organisation’s computing, networking, and information management aspects, whereas OT networks support devices that monitor and control physical processes and equipment that have safety and physical impacts on an organisation’s operations. Often, the OT and IT networks are physically separate and distinct. However, more recently, we have observed the desire to integrate both the IT/Corporate and OT network environments in an effort to reduce costs, enhance productivity, and gain a competitive edge.  

However, along with this desire to achieve tangible benefits, significant cybersecurity challenges arise that must be properly addressed to safeguard critical networks and assets. 

Cybercriminals seek to exploit vulnerabilities in corporate/IT networks as an attack vector or pathway to access critical OT systems. The consequences of such breaches can be severe, ranging from financial losses to compromised public safety. Attacks on power grids, shipping lines, manufacturing plants, and other facilities are steadily increasing. 

At Nextro, we understand that as organisations embark on their digital transformation journey to increase efficiency and enhance productivity while seeking to reduce costs, it is crucial to implement robust cybersecurity measures tailored to the unique requirements of OT environments.  

This applies whether an organisation has a physically distinct and separate OT network (from the IT/corporate network) or operates a converged/integrated OT/IT/Corporate network.  

This blog post covers the main steps organisations can take to secure their OT environment, whether separate or integrated with the IT/corporate network environment.   

Cyberthreats to Operational Technology 

Traditionally kept separate, the integration of IT/corporate and OT networks has become increasingly common, driven by the promise of improved efficiency and competitiveness. However, this convergence also brings heightened exposure to cyber intrusions. 

Recent Fortinet surveys reveal alarming statistics. 93% of organisations surveyed experienced intrusions in the past year, highlighting the pervasive nature of cyber threats in OT environments. To address these risks, investments in IT/corporate networks and OT security technologies are on the rise, showing the increasing prioritisation of OT security. 

When controls for physical equipment connect to enterprise computer networks and the cloud, the digital attack surface expands, allowing cyber attackers to penetrate industrial organisations in new ways. 

Attackers are gaining expertise in OT sabotage. They are developing, selling, and buying specialised toolsets designed to penetrate OT protocols and equipment. 

Rogue nation-states are the biggest threat actors and have consistently demonstrated the ability to inflict damage on both local and global scales. 

Cybersecurity Solutions for OT environments  

Securing OT environments may initially seem daunting, but organisations can mitigate risks through incremental steps toward a robust security posture.  

Historically, organisations have prioritised OT functionality over security, leading to a lack of basic security hygiene practices. It is crucial for organisations to embed safety and security as fundamental components of their operations, fostering a culture of best practice adoption throughout the organisation. 

Cybercriminals often exploit common attack vectors, such as spear phishing, compromised endpoints, and stolen credentials, to infiltrate OT environments. Implementing measures like two-factor authentication, ongoing employee security education, and continuous system and border monitoring for indicators of compromise (IOCs) is essential to thwarting these threats.  

To ensure the safety of their OT networks, organisations must implement a thorough security approach to quickly identify and remove access to critical and highly valued OT assets. This proactive security needs to be engineered directly into the OT environment planning, not only adopted after attacks.  

Key Steps for Enhanced Security 

At Nextro, we have put together five important steps to guide organisations through their OT security transformation.  
1. Gain Full Visibility: Develop a thorough inventory of digital assets across IT and OT environments to understand the security landscape fully. Identify users, applications, devices, and systems to lay the foundation for a robust security architecture. 

2. Segment the Network: Implement network segmentation to create security boundaries restricting unauthorised access. By dividing the network into functional segments and controlling communication between them, organisations can minimise the attack surface and limit the lateral movement of threats. 

3. Monitor and Control Access: Authenticate and authorise devices, users, and applications before granting access to resources. Adopt a zero-trust approach to security, continually verifying identities and enforcing access policies. 

4. Implement Proactive Measures: Stay ahead of evolving threats by deploying proactive security measures that pre-emptively identify and prevent potential attacks. Embrace automation to streamline security operations and respond swiftly to incidents. 

5. Streamline Security Operations: Establish a comprehensive cybersecurity operation integrating network and security operations across network and OT environments. Organisations can achieve optimal security outcomes by converging NOC and SOC functions and leveraging automation. 

The Path Forward 

As organisations navigate the complexities of IT and OT convergence, the Fortinet Security Fabric provides a roadmap to a secure and resilient future. By deploying security measures in alignment with industry standards and best practices, organisations can strengthen their defence against cyber threats and safeguard their digital assets effectively. 

In conclusion, prioritising operational technology cybersecurity is essential for organisations leveraging digital transformation to drive innovation and growth. By adopting a proactive and comprehensive approach to physical and cyber security, organisations can mitigate risks, protect critical infrastructure, and ensure a secure foundation for future success. 

Nextro’s OT Cybersecurity Solutions 

At Nextro, we offer comprehensive physical and cybersecurity solutions designed to effectively protect interconnected IT and OT infrastructure. By integrating security across the entire attack surface, sharing threat intelligence between security products, and automating responses to threats, Nextro solutions empower organisations to bolster their security posture and mitigate risks.  

If you want to know more about how to start your OT security transformation, get in touch with our team now. 

The post Protecting Your Organisation: Introduction to Operational Technology Cybersecurity  appeared first on Nextro.

Nextro is proud to announce the successful go-live of the unified operations and security centre for our customer, Port Taranaki.  

This upgrade positions the port at the forefront of modern in-port maritime security and operational efficiency and is the result of a well-executed strategy by Port Taranaki’s security and operations team in pursuit of their vision for a unified operations centre powered by Genetec and Axis Communications.  

This state-of-the-art enhancement is a strategic shift that not only boosts port security, but also improves visibility and control of port operations, as well as enhancing health and safety.  

Enhancing Security in a Complex Environment 

Port Taranaki’s commitment to security is underscored by the Maritime Security Act 2004, which mandates rigorous measures such as restricted access and constant monitoring of perimeter and operations.  

Mark Stewart, the project manager for this upgrade, emphasised the critical nature of top-tier security: “Security at the top end is very, very important. If you don’t have security, you don’t have a port, because you are not meeting international obligations.” 

Unifying Security and Operations 

The heart of this upgrade is the newly established Security/Comms Room, which merges multiple facets of port operations and security into a centralised control hub at the Port Taranaki Centre.  

In this new comms room, Nextro, together with Port Taranaki’s team and other partners, has combined video surveillance, intercoms, access control, alarms, port operations, and emergency/fire systems into a single ops centre – materially improving overall visibility, control, efficiency and safety. 

Key additions include: 

Distributed Control System Integration: This allows for remote access to vital systems such as fire water systems, gas pipelines, and alarms, enhancing both safety and operational efficiency. 

Internet-Enabled Communication: The new setup replaces traditional radio systems and enables seamless communication over the Internet between the control room, incoming ships, and various port channels. 

Ultra-high-definition monitors: The installation of new 4K monitors provides clear and detailed visuals from the on-port video surveillance system. 

Expanded Monitoring Capabilities: With the number of screens increasing from three to 14, operators can now simultaneously monitor weather conditions, the Shore Tension mooring system, and multiple camera feeds. The system also supports footage review from the past 30 days, offering a robust tool for incident analysis and operational review. 

A Leap Forward in Operational Efficiency 

Mark Stewart describes the Genetec upgrade as a “massive step forward” from the previous system, highlighting the enhanced control, knowledge, and visibility it brings to port operations. “The comms and security officer is a very responsible position, so this upgrade assists them with their work, which is fantastic,” he added. 

The integration of these advanced systems means that all aspects of port operations, including customer assets and activities, are now meticulously monitored from a single, sophisticated centre. This ensures compliance with international security standards and significantly boosts the port’s operational efficiency and safety protocols. 

Future-Ready Security 

Nextro’s design ensures that Port Taranaki is well-prepared for future technological advancements. The infrastructure is built to accommodate additional tech enhancements, ensuring that the port remains at the forefront of maritime security and operations for years to come. 

Nextro’s successful upgrade of Port Taranaki’s security system marks a significant milestone in maritime safety and operational efficiency. This project exemplifies our commitment to delivering best-of-breed security solutions to protect critical infrastructure and commerce and enhance operational capabilities.  

Congratulations to Port Taranaki and the project team on the successful execution of their vision for a future-proofed, unified, security and operations platform that sits at the heart of Port Taranaki Centre. 

The post Nextro helps Port Taranaki transform its security and operations with new, state-of-the-art, communications room appeared first on Nextro.

Genetec Unified Elite Partner, Nextro, takes top NZ award in Chiang Mai, Thailand at the Genetec Elevate 24 partner event for the Asia Pacific & Oceania regions.

Auckland, New Zealand, 18 March 2024 – Nextro, the New Zealand security integrator and managed network and security services provider, was awarded the prestigious Genetec Partner of the Year – New Zealand award in front of a packed partner event hosted by Genetec in Chiang Mai, Thailand. 

The award recognises Nextro’s growth, capabilities, and customer wins for Genetec in the New Zealand market, where the company has deployed and integrated Genetec for unified video surveillance, access control, intrusion detection and licenses plate recognition systems, for leading enterprises and critical infrastructure operators across New Zealand.

More recently, Nextro has deployed and integrated industrial IOT (IIOT) sensors across campuses with reporting and alerting directly into Genetec. It is also the leading provider of the Genetec Security Center SaaS cloud solution for physical security unification in the New Zealand market.   

“Over the last year, the Nextro team has delivered several market-leading security and operations technology projects for critical infrastructure providers in New Zealand. We are thrilled with the Genetec Partner of the Year for New Zealand award and the recognition of our team’s and customers’ combined efforts to deliver unified security solutions to protect strategic assets. Our customers love what we do and there is nothing better than seeing the security, operations, and health and safety teams enjoy the benefits daily,” said Martyn Levy, Nextro’s Managing Director.

Nextro’s managed network, cybersecurity, IIOT, and cloud experience and capabilities mean that, coupled with Genetec’s video surveillance and access control solutions, Nextro is able to deliver secure, unified operations technology and security solutions for its customers.

“Nextro has delivered complex unified security solutions for key Genetec customers in New Zealand, and we are delighted with the company’s performance over the year,” said George Moawad, Genetec Country Manager of Australia and New Zealand. “We work very closely with the Nextro team and we look forward to an even bigger year ahead,” he added.

Genetec awarded honours as part of a wider Asia-Pacific partner event in Thailand, with award winners from each region.

The post Nextro awarded Genetec Partner of the Year for New Zealand at Elevate 24 appeared first on Nextro.