Air gaps continued
Air gaps and brittle, unpatched IT systems make a dangerous combination. Many asset owners, operators and regulators worldwide believe air gaps provide fail-safe protection against cyber attacks and APTs. The physical air gaps have thus fostered mental ones, an "it can't happen here" sense of invulnerability that can lead to negligent or even reckless behavior when it comes to cybersecurity.
The reason? Cyberattacks can pass through traditional safeguards – guards, guns and gates – like ghosts. Connectivity isn't just via a hard line anymore. Whether intentionally or hoodwinked through social engineering, authorized facility personnel can personally deliver the means of potential exploitation, either by physical device or wireless connection, past every air gap.