ICS/SCADA Resilience – Top 20 Secure PLC Coding Practices

The much anticipated Top 20 Secure PLC Coding Practices was released today. This list is reportedly the brain-child of water sector veteran Jake Brodsky and was presented during an S4x20 Conference session. According to Dale Peterson, as this initiative was too important to slip away, he made it an official S4 project to organize and recruit engineers who could create a quality list. The coding practices are intended to be used by automation engineers and technicians that program and maintain PLCs. Each practice includes guidance, examples, benefits, and reference mappings to the MITRE ATT&CK® for Industrial Control Systems and IEC 62443. The Top 20 Secure PLC Coding Practices is the first of its kind guidance document to secure the inherently insecure-by-design PLCs. Read more at Dale Peterson and access the list at PLC-Security.