GIS for utilities: How safe is the cloud, really?

Chances are, if you’re online, you’ve experienced a cybersecurity compromise at some point. Be it a personal encounter like unauthorized use of your credit card or identity theft, or a professional incident, cyber criminals are always at work, poised to seize any available information.

Critical infrastructure is not immune to these threats. Cyberattacks on utilities rose by more than 200% in 2023, with overall cyberattacks increasing by 104%.

Concerns for utilities and communications companies

Since the global pandemic, remote work has become the new norm, even for professionals in utilities and communications. This shift has heightened security concerns as IT departments now face the challenge of ensuring the security of multiple home networks and connections, extending beyond their traditional boundaries. Email phishing and social engineering attacks are common entry points, with many utility employees inadvertently falling prey to such schemes. Email-based attacks accounted for nearly 90% of breaches in the utility sector.

According to Oracle, “Threats are moving at machine speed, while traditional enterprise security analyzes and reacts at human speed.” IT teams, particularly those associated with small- to medium-sized utilities and telecommunications companies, often face a significant challenge in combating cyber threats. The constant risk posed by potential attacks can be a source of concern, drawing focus away from their core responsibilities of supporting their customers.

What’s the solution?

Initially, organizations hesitated to migrate their applications to the cloud due to uncertainty about the measures in place to defend data from potential hackers or even other cloud users. But now, almost everyone agrees that traditional on-premises approaches to security are simply not enough. A shared responsibility model with a trusted cloud provider is becoming the standard for keeping companies and their data safe.

As the cloud offers the potential for enhanced adaptability, more agile operations and substantial cost benefits, companies of varying sizes are transitioning vital business applications to the cloud as a top strategic objective. Hexagon’s utilities and communications customers also want to take advantage of cloud benefits, so we have joined forces with Oracle to create a safe, secure, SaaS GIS for utilities solution that combines Hexagon’s geospatial asset management solution with Oracle Cloud Infrastructure (OCI): HxGN NetWorks in the cloud.

More on OCI

OCI Security assists in minimizing the risk of security threats for cloud workloads. It offers simple, direct and integrated security features built into its platform, enabling customers to adopt and secure their cloud infrastructure, data and applications seamlessly. Security is interwoven into Oracle’s cloud solutions from the ground up, guaranteeing full-stack protection and including capabilities like isolated network virtualization, hardware root of trust and tenant isolation. In line with the UK National Cyber Security Centre’s eight principles, Oracle offers an approach toward a Zero Trust Security model, ensuring protection from physical hardware to web layers.

Data security is ensured

Even as Oracle pledges its commitment to security, customers play an essential role in safeguarding their data. This includes adherence to best practices, maintaining up-to-date software and implementing robust security measures.

Enter Hexagon.

In its role as a fully managed SaaS solution provider, Hexagon ensures the software on OCI remains current and upgrades and patches are installed. This arrangement frees up utilities and communications IT departments and employees to focus on shaping their IT architecture, much like a conductor guiding an orchestra. IT maintains ultimate control of the organization’s structure and data while relying on Hexagon and Oracle for upgrades and cybersecurity. This enables IT to be proactive and keeps their focus on their organization’s core business needs.

Cloud service providers take rigorous steps to ensure data privacy and security for each customer. Each customer subscribing to HxGN NetWorks in the cloud chooses where its data resides and has complete ownership and control over its data. Hexagon achieves this with multitenant architecture by isolating each client’s data in what’s known as a dedicated instance, or environment. This means that each customer’s data storage and computing activities are compartmentalized from those of other customers. Advanced security measures, including data encryption and access control mechanisms, further fortify the protection of these isolated instances. As a result, there is no sharing or crossover between different customers, ensuring the integrity and confidentiality of each client’s data. Although Hexagon owns the platform and infrastructure, and customers share that infrastructure, customer data remains distinctly separated and safeguarded.

With all of these measures, including isolation mechanisms, network security, compliance with many international and industry-specific certifications, patch management and upgrades to the database and software, Hexagon and Oracle provide a secure cloud environment that effectively protects customer data.

Discover more

HxGN NetWorks in the cloud is a GIS for utilities that gives customers the security and peace of mind of knowing their data is safe and their systems are optimized so they can focus on their core business, customers and innovation.

Explore HxGN NetWorks

Learn more about Oracle Cloud

  • Explore tech-focused stories, industry trends and customer insights in Hexagon's Safety, Infrastructure & Geospatial division blog.



  • Recent Posts

    More
  • Most Popular Tags