OT/ICS Cybersecurity Newsletter

Hey there, welcome to this week's edition of the Cybersecurity Newsletter.

For the OT/ICS Cybersecurity professional that needs to know it all, but doesn't have the time - we've got your back.

BLOG

Co-Founder/CPO Cherise Esparza Presents on S4x22 Main Stage

This year, SecurityGate.io Co-Founder & Chief Product Officer Cherise Esparza was honored to share her perspective of the ever-changing OT/ICS cybersecurity industry in Miami, Florida on the main stage of S4x22, the largest conference for OT (Operational Technology) and ICS (Industrial Control Systems) security.

Watch Now

CISA Strategic Plan 2023-2025

The 2023-2025 CISA Strategic Plan is the first comprehensive Strategic Plan since CISA was established as an agency in 2018. The Strategic Plan represents a forward-leaning, unified approach to achieving our vision of ensuring secure and resilient critical infrastructure for the American people.

Read now

Pipeline Security Guidelines

This document outlines pipeline security efforts initiated by TSA. These guidelines are applicable to operational natural gas and hazardous liquid transmission pipeline systems, natural gas distribution pipeline systems, and liquefied natural gas facility operators. Additionally, they apply to operational pipeline systems that transport materials categorized as toxic inhalation hazards (TIH).

Read now

NEWS

DOE reports on cybersecurity considerations for distributed energy resources across US electric grid

"The U.S. Department of Energy (DOE) released on Thursday a report detailing its long-term evaluation of the cybersecurity considerations associated with distributed energy resources (DER), such as distributed solar, storage, and other clean energy technologies, and the potential risks to the electric grid over the next ten years." - Industrial Cyber

"Some of the recommendations from the DOE are to develop standards, compliance and best practices for OT and prioritize baseline assessments as a minimum. Review OT security and legacy systems. Focus on governance of utility and distributed energy resources. Involve stakeholders in priorities. Lastly, focus on supply chain security." - Chris McGarity

Industrial control systems face more cyber risks than IT, expert testifies

"The lack of resilience embedded in much of the nation’s existing infrastructure sites makes this the perfect time to begin to rethink how the U.S. develops and maintains key facilities, according to officials." - Cybersecurity Dive

“The National Laboratory System is amazing and Idaho National Laboratory is one of the best. There is a window of opportunity here, like Mr. Gipson says, to better secure OT infrastructure. Yet the market has been slow to ask for these upgrades, so maybe the idea of a Center of Excellence to spearhead the understanding (and use!) of methodologies like Cyber Informed Engineering to build better SCADA ‘mousetraps’ might be a good forum to lead industry along that path. In a briefing to one of the 17 Congressional committees and subcommittees that oversee cyber.” - Bill Lawrence, CISO

SecurityGate

Cherise Esparza's S4x22 Presentation