Automotive companies encounter challenges following 24-hour shutdown.

The research from GitProtect Lab reveals critical insights into the operational vulnerabilities in the automotive sector regarding downtime and recovery processes. Key findings include:

1. Short Downtime Tolerance:

   • 87% of automotive organizations cannot sustain more than 24 hours of operational downtime.
   • 19.5% face an immediate crisis within two hours of an outage.

2. Survey Demographics:

   • Respondents included mostly professionals from:
     • Automotive software/technology (29%)
     • Engineering/testing/design (27.5%)
     • Mobility/fleet/logistics (21%)
     • Tier-1 and Tier-2 suppliers (14%)
     • Original equipment manufacturers (8.5%)

3. Response to Downtime:

   • 39.5% of organizations can only withstand 2-12 hours of downtime before downstream effects are felt.
   • 28% can manage 12-24 hours due to reliance on physical inventory buffers.
   • Only 8.5% can tolerate one to three days of minor delays.

4. Recovery Process Weaknesses:

   • Just 23% can fully restore critical data in under four hours using automation.
   • Nearly half (46.5%) take 4-24 hours due to manual recovery workflows.
   • 18% take 2-5 days or longer, and 8% have never practiced full restoration drills.

5. Network Security Risks:

   • 78.5% operate with inadequate IT and OT network segregation, increasing vulnerability to lateral attacks.
   • 55.5% of plant managers felt only moderately or unprepared for ransomware impacts on operations.

6. Backup Strategies:

   • 70.5% use isolated backup protections, with 26% employing immutable storage for critical data.
   • Some are still at risk with connected backups or lack a centralized backup system.

7. Complexity in Recovery Planning:

   • Increased reliance on interconnected systems complicates recovery strategies as manufacturers manage not only production mechanisms but also software and logistics.

This report underscores the urgent need for automotive organizations to enhance their disaster recovery strategies and network safeguards to mitigate risks associated with downtime and cyber threats.