(TLP:CLEAR) CISA Releases Guidance for Securing OT Systems

Summary: CISA, in collaboration with the FBI, the UK’s National Cyber Security Centre, and other international partners has released new joint cybersecurity guidance titled “Creating and Maintaining a Definitive View of Your Operational Technology (OT) Architecture.”

Building on the recent Foundations for OT Cybersecurity: Asset Inventory Guidance for Owners and Operators, this guidance explains how organizations can leverage data sources, such as asset inventories and manufacturer-provided resources like software bill of materials, to establish and maintain an accurate, up-to-date view of their OT systems.

Analyst Note: This guidance can help utilities account for their critical assets and secure the supply chain, both of which are critical cybersecurity actions to strengthen security posture and reduce overall cyber risk. WaterISAC encourages members to make use of the new guidance which can help supplement efforts to incorporate the 12 Cybersecurity Fundamentals for Water and Wastewater Utilities.

Original Source: https://www.cisa.gov/resources-tools/resources/creating-and-maintaining-definitive-view-your-operational-technology-ot-architecture

Mitigation Recommendations:

• Fundamental 5: Account for Critical Assets | 12 Cybersecurity Fundamentals for Water and Wastewater Utilities
• Fundamental 11: Secure the Supply Chain | 12 Cybersecurity Fundamentals for Water and Wastewater Utilities

Related WaterISAC PIRs: 11, 12