OT/ICS Cybersecurity Newsletter

Hey there, welcome to this week's edition of the Cybersecurity Newsletter.

For the OT/ICS Cybersecurity professional that needs to know it all, but doesn't have the time - we've got your back.

BLOG

SecurityGate.io Partners with Octopian on Risk Management, Remediation, and Compliance Standards

SecurityGate.io and Octopian have partnered to support global critical infrastructure organizations in managing cyber security risks. Our strategic partnership is a strong fit with our focus on helping clients secure their environments while improving their security posture.

Read now

Railway Cybersecurity

This report aims to be a reference point for current good practices for cyber risk management approaches that are applicable to the railway sector. It offers a guide for railway undertakings and infrastructure managers to select, combine or adjust cyber risk management methods to the needs of their organisation.

Read now

Infrastructure Resilience Planning Framework (IRPF)

The Cybersecurity and Infrastructure Security Agency (CISA) developed the Infrastructure Resilience Planning Framework (IRPF) to provide an approach for localities, regions, and the private sector to work together to plan for the security and resilience of critical infrastructure services in the face of multiple threats and changes.

Read now

NEWS

US offshore oil and gas rigs at 'significant' risk of cyberattacks, warns government watchdog

"U.S. offshore oil and gas infrastructure faces “significant and increasing” cybersecurity risks that require “urgent” attention, a U.S. government’s watchdog has warned." - Tech Crunch

“It takes a while to get equipment and crews out to these massive islands in the water but that is no secure moat from cyber attacks, since digital connectivity has increased for both business and personal usage on them. Cyber risk assessments must be completed for these extremely important parts of the supply chain, and exposed gaps must be tackled and whittled down, just as if the rigs sat on dry land.” - Bill Lawrence, CISO

NEWS

EU Parliament approves new rules to protect essential infrastructure, bring about consistency among member states

"The move to protect critical infrastructure against physical and digital threats is more than ever high on the EU agenda, not least in light of the recent Nord Stream gas pipeline sabotage." - Industrial Cyber

“This intricate dance of diplomacy and democracies, performed to the tune of critical infrastructure, with the undertone of advanced persistent threat actors running throughout – this is very interesting, with so many actors and such critical infrastructure to protect. The dialogue in the designation of the ‘Entities of particular European significance – those providing essential services to, or in more than, one-third of member states (i.e. nine) – [that] would be subject to specific oversight’ must be intense, and even more so with calls to broaden that definition to just 6 member states, which means more companies on the dance floor and under scrutiny. All under the watchful eyes of public and private organizations and their fiefdoms. Add in the ‘The proposal also envisages on-site inspections and penalties for non-compliance.’ Keep your hands where we can see them.” - Bill Lawrence, CISO

NEWS

Critical infrastructure providers ask CISA to place guardrails on reporting requirements

"Some of the nation’s top critical infrastructure providers are asking the Cybersecurity and Infrastructure Security Agency to provide guardrails around the incident reporting requirements signed into law by President Biden earlier this year." - Cybersecurity Dive

“When information sharing becomes information-must-report-or-get-hit-with-a-fine, there will be a natural inclination to cover bases by sharing a big data dump with any incident, requiring the government to be able to accept whatever digital information is sent their way, analyze it, and make enough sense out of it to make timely and actionable intelligence for others who might be similarly targeted. Hopefully the public listening tour and the input from the private sector with decades of experience in this space will help separate the wheat from the chaff.” - Bill Lawrence, CISO

SecurityGate

US offshore oil and gas rigs at risk