CERT mailing list archives

CISA, DOE, and UK’s NCSC Issue Guidance on Protecting Industrial Control Systems


From: "US-CERT" <US-CERT () ncas us-cert gov>
Date: Fri, 22 May 2020 14:16:28 +0000

Cybersecurity and Infrastructure Security Agency Logo

National Cyber Awareness System:



CISA, DOE, and UKs NCSC Issue Guidance on Protecting Industrial Control Systems [ 
https://www.us-cert.gov/ncas/current-activity/2020/05/22/cisa-doe-and-uks-ncsc-issue-guidance-protecting-industrial-control
 ] 05/22/2020 08:08 AM EDT 
Original release date: May 22, 2020

The Cybersecurity and Infrastructure Security Agency (CISA), the Department of Energy (DOE), and the UK's National 
Cyber Security Centre (NCSC) have released Cybersecurity Best Practices for Industrial Control Systems [ 
https://www.cisa.gov/publication/Cybersecurity-Best-Practices-for-Industrial-Control-Systems ], an infographic 
providing recommended cybersecurity practices for industrial control systems (ICS). The two-page infographic summarizes 
common ICS risk considerations, short- and long-term cybersecurity event impacts, best practices to defend ICS 
processes, and highlights NCSC's product on Secure Design Principles and Operational Technology [ 
https://www.ncsc.gov.uk/collection/cyber-security-design-principles ].

CISA, DOE, and NCSC encourage users to review Cybersecurity Best Practices for Industrial Control Systems [ 
https://www.cisa.gov/publication/Cybersecurity-Best-Practices-for-Industrial-Control-Systems ]. For more in-depth 
information, visit CISAs ICS Recommended Practices [ https://www.us-cert.gov/ics/Recommended-Practices ] webpage and 
DOE's Cybersecurity Capability Maturity Model (C2M2) Program [ 
https://www.us-cert.gov%20https://www.energy.gov/ceser/activities/cybersecurity-critical-energy-infrastructure/energy-sector-cybersecurity-0
 ] webpage. For information on CISA Assessments, visit https://www.cisa.gov/cyber-resource-hub.

This product is provided subject to this Notification [ https://www.us-cert.gov/privacy/notification ] and this Privacy 
& Use [ https://www.dhs.gov/privacy-policy ] policy.

body { font-size: 1em; font-family: Arial, Verdana, sans-serif; font-weight: normal; font-style: normal; color: 
#333333; } ________________________________________________________________________

A copy of this publication is available at www.us-cert.gov [ https://www.us-cert.gov ]. If you need help or have 
questions, please send an email to info () us-cert gov. Do not reply to this message since this email was sent from a 
notification-only address that is not monitored. To ensure you receive future US-CERT products, please add US-CERT () 
ncas us-cert gov to your address book. 

OTHER RESOURCES: Contact Us [ http://www.us-cert.gov/contact-us/ ] | Security Publications [ 
http://www.us-cert.gov/security-publications ] | Alerts and Tips [ http://www.us-cert.gov/ncas ] | Related Resources [ 
http://www.us-cert.gov/related-resources ]  

STAY CONNECTED: Sign up for email updates [ http://public.govdelivery.com/accounts/USDHSUSCERT/subscriber/new ] 


Current thread: