On August 13, the National Security Agency (NSA) joined the Cybersecurity and Infrastructure Security Agency (CISA) and others to release the Cybersecurity Technical Report (CTR), “Foundations for OT Cybersecurity: Asset Inventory Guidance for Owners and Operators.”
As a vital part of critical infrastructure, operational technology (OT) is often targeted by malicious cyber actors seeking to degrade our way of life, disrupt or destroy systems and services, or conduct nefarious activities such as extortion. This guidance outlines the process to create an OT asset inventory, develop a taxonomy of OT systems, and create a modern defensible architecture by providing net defenders with digestible foundational elements and best practices.
Using the processes outlined, organizations are encouraged to build an asset inventory to aid in risk identification, vulnerability management, and incident response. Additionally, the CTR details steps OT owners and operators should take to best use, maintain, and improve their asset inventory to protect vital assets, enhance their overall security posture, and ensure the safety of their OT environments.
This is especially relevant in defending the operation OT systems and services across National Security Systems (NSS), the Department of Defense (DoD), and the Defense Industrial Base (DIB).
Source: NSA
IC News delivers the situational awareness you need to get ahead and stay ahead in the IC contracting space. Subscribe today for full access to 10,000+ articles, plus new articles each weekday.