FBI and CISA Highlight Risks of Third-Party ICS Integrator Access to Critical Infrastructure

(TLP:CLEAR) Yesterday, the FBI and CISA released a joint fact sheet, “Considerations for Critical Infrastructure Operators Working With Third-Party ICS Integrators.” It explains how owners and operators can reduce risk when they rely on outside firms to design, install, support, or operate industrial control systems. The agencies stress the importance of limiting integrator access to only what each task requires, and they warn that an integrator’s network can give malicious actors a pathway into customer operational environments, or detailed knowledge of them.