When business owners think about cybersecurity, they probably worry about hackers accessing their computers, stealing customer information or taking control of their payment systems.
But what about their fridges and freezers?
It might sound like the plot of a rather silly science fiction film, but modern commercial refrigeration equipment can genuinely be vulnerable to cyber attacks.
From supermarket freezer cabinets and restaurant cold rooms to pharmaceutical refrigerators and temperature-controlled warehouses, increasing numbers of refrigeration systems are connected to the internet.
And anything connected to a network could potentially provide an opportunity for cybercriminals.
Why would hackers target a fridge?
The answer is surprisingly straightforward. Many modern refrigeration systems use smart technology to monitor temperatures, control energy consumption, issue maintenance alerts and allow engineers to make adjustments remotely.
These features can save businesses considerable amounts of money. Unfortunately, poorly secured equipment can also introduce cybersecurity risks.
A cybercriminal who gains access to a refrigeration management system might be able to interfere with temperature settings, disable alerts or disrupt monitoring.
Imagine a restaurant discovering that thousands of pounds' worth of food has spoiled because its refrigeration system was interfered with overnight.
Or consider the potentially serious consequences for a pharmacy, hospital or medical laboratory where temperature-sensitive medicines and samples must be stored within strictly controlled limits.
In some circumstances, compromised equipment could also provide an entry point into a company's wider computer network.
How can businesses protect themselves?
Fortunately, there are several sensible precautions that businesses can take.
1. Find out whether your refrigeration equipment is connected to the internet.
Not every commercial fridge or freezer has internet connectivity. However, equipment with remote monitoring, Wi-Fi, Ethernet connections or cloud-based management should be included in your cybersecurity assessments.
2. Change default passwords.
Never leave equipment using factory-set usernames and passwords. Replace these with strong, unique credentials and enable multi-factor authentication wherever supported.
3. Keep software updated.
Smart refrigeration equipment may require firmware and software updates. Ask your supplier or maintenance contractor how security updates are provided and whether the equipment is still supported.
4. Separate refrigeration systems from business computers.
Where possible, place connected refrigeration equipment on a separate network from payment terminals, customer databases and other sensitive business systems.
5. Restrict remote access.
Only authorised staff and trusted maintenance engineers should be able to access refrigeration controls remotely. Disable unnecessary remote access features and review third-party access regularly.
6. Install independent temperature alarms.
Consider using a separate temperature monitoring and alarm system that cannot be disabled through the same network connection as the refrigeration controls.
7. Prepare for an emergency.
Every business storing perishable goods should have a contingency plan covering refrigeration failures, including suspected cyber attacks.
This might involve alternative cold storage, emergency maintenance arrangements and procedures for checking whether food or medicines remain safe.
Don't forget your refrigeration maintenance company
Businesses should also ask their refrigeration contractors about cybersecurity.
Do engineers access equipment remotely? How are their passwords protected? Can former employees still access customers' systems?
A reputable supplier should be able to explain how connected equipment is secured and maintained.
Cybersecurity isn't just an IT problem
The increasing use of connected technology means cybersecurity is becoming relevant to almost every aspect of business operations.
A restaurant owner might not regard a walk-in freezer as a computer system. Similarly, a supermarket manager might not immediately consider refrigeration cabinets when reviewing cybersecurity arrangements.
Nevertheless, connected equipment deserves the same attention as other networked business technology.
The UK's National Cyber Security Centre (NCSC) provides practical advice for businesses seeking to improve their cybersecurity arrangements.
Visit the National Cyber Security Centre for further guidance. https://www.ncsc.gov.uk
The bottom line? Your business might have invested thousands of pounds in sophisticated refrigeration equipment to protect valuable stock. It makes good business sense to ensure that equipment is protected from hackers as well.
After all, nobody wants to discover that their business has been left out in the cold by a cybercriminal.
No comments:
Post a Comment