The foundation of an effective operational technology (OT) Cybersecurity strategy is documented knowledge about the specific process control environment including the assets that form the automation system. OT asset management enables end user organizations to visualize the industrial control system (ICS) assets they have including where they are located, ensuring that all assets are tracked so they can be secured properly. But more importantly, the best solutions provide det

I don't think this is an irrational step, dependent of course on the sensitivity and confidentiality requirements of the information exchanged between employees of a business or with outside entities. Many people have been set up to work from home for many years and may have had ample time to think through the associated risks and implement countermeasures. But for those who are thrust into the home office environment amid the Coronavirus concerns this is something to at leas

Use passphrases instead of passwords or complex nonsensical strings to strike the balance between easy to remember and adequate strength. #passphrase #cybersecurity #mrchow

Some practical knowledge that may not be so common regarding passwords, great info from FBI. Original article can be found here #cybersecurity #passwords

I appreciate published works from major manufacturers like Rockwell on the subject of Cybersecurity for many reasons, not the least of which is the influence these organizations have over the ICS community at large across multiple industries in every land, and what a positive impact this can have in improving the Cybersecurity culture globally. Informative and Educational, thank you Rockwell for another great article that is an easy read on a complex subject! Original articl

ISA 62443 is making a positive impact on ICS manufacturers who are following the Security Level model for Cybersecurity in development of their products. Great article from Rockwell Automation on producing the First Industrial Controller, the ControlLogix 5580 PLC CPU, certified to IEC 62443-4-2 standards demonstrating strengthened security, fantastic Rockwell! Original post can be found here #62443 #isa #processcontrol #rockwell #iec #automation #cybersecurity

Helpful post from some Inductive Automation Ignition users about adhering to ISA 62443 Cybersecurity practices when setting up a secure ICS remote access architecture. Great to see SCADA products that can be implemented in a way that compliments security when traditionally this has produced challenges. Original post can be found at https://forum.inductiveautomation.com/t/remote-access-according-iec62443-architecture/17099 #62443 #cybersecurity #ics #remoteaccess #ignition

In relation to my previous post regarding the ransomware disruption to an OT system, this article was published by Palo Alto in 2014 describing ISA 62443 as the 'Gold Standard' for network segmentation. The guidance is and has been available, but we need to keep communicating and educating to ensure this type of information continues to flow to those who may feel overwhelmed on where to start. Start with high-reward, low-effort changes like segmentation between Business/ICS

This recent alert from CISA discusses the immediate impact ransomware can have to an ICS environment when segmentation and data flow restrictions between the enterprise zone and the ICS zones is not in place. This is exceedingly common in several industries. CISA summed it up well with the statement "The victim failed to implement robust segmentation between the IT and OT networks, which allowed the adversary to traverse the IT-OT boundary and disable assets on both network