Your Source for Energy Jobs & Industry News
National Security Council Director of Critical Infrastructure Cybersecurity Jonathan Murphy told attendees at CyberTalks in Washington, DC, on Nov. 16 that the anticipated rewrite of Presidential Policy Directive 21 (PPD-21) will emphasize CISA’s role in coordinating infrastructure security. “We’re looking across all of those 16 infrastructure sectors to identify where..
Energy Central…
BoD members and C-Suite Executives that want to know how to check the reasonableness of their cybersecurity controls should consider applying the "Duty of Care Risk Assessment" (DOCRA) methods in the Center for Internet Security RAM program described in the 60 minute video at the link below (click Read More). And don't forget to preserve your tamper-proof evidence showing that..
Energy Central…
I've personally witnessed, and participated in, Microsoft's commitment to implement cybersecurity software supply chain improvements to help the US Government implement Executive Order 14028 requirements for SBOM. While many software vendors are talking the talk on Executive Order 14028 the folks at Microsoft are walking the walk and making real progress. I fully expect that Microsoft..
Energy Central…
PacifiCorp is seeking customer-centric candidates to grow and sustain our commitment to a culture of customer service excellence, environmental sustainability and diversity, equity and inclusion.
Provides consultation to the BHE Chief Security Officer (CSO) regarding emerging national and global cyber security threats and mitigation tactics specific to Operational Technologies and supporting networks used by BHE affiliates. Represents the CSO in advising OT leaders on security practices. Provides direction on security requirements for OT technology related projects and coordinates with business operations for advanced security analytics to aid in detecting and mitigating digital network intrusions by comparing and correlating BHE data with externally-furnished information.
The post The Airgap Is Not Enough: The Failed Security Perimeter Paradigm in OT Networks appeared first on POWER Magazine.
Operational technology (OT) electronics and networks for manufacturing, energy production, and virtually every other industrial application, are targets for cyberattacks. For infrastructure-related companies, such as power producers, transportation, and water plants, the OT networks are not only the revenue producers, but also important targets for destabilizing national security. Successful attacks can be destructive and costly, but the cost of the tools, training, and rigor to secure systems is also high.
An inexpensive perimeter defense solution to secure OT networks has become prevalent: Isolate the network from the internet with an “airgap” or a unidirectional communication device that blocks incoming communication and thus cyberattacks. With an airgap in place, other cybersecurity measures, such as the application of security patches, are no longer perceived to be necessary, reducing costs. In practice, the airgap solution is insufficient.
The airgap defense is not a new or revolutionary idea.…