As cited
Copy frozen at (site build).
government policy
Here’s how experts think CISA should tell agencies to protect OT
A coalition of cyber firms and critical infrastructure operators called for CISA to issue a binding operational directive requiring federal agencies to protect operational technology systems, following recent water utility attacks. The proposal recommends designating responsible parties, establishing minimum security practices, and leveraging existing guidelines to address gaps in federal OT visibility and policy consistency. The coalition cited a Government Accountability Office report showing most federal civilian agencies have not yet implemented 2023 Office of Management and Budget requirements for networked Internet of Things and OT devices.
Why it matters: Federal agencies and critical infrastructure operators must act because CISA currently lacks visibility into OT devices across government, creating exposure for 8,000 General Services Administration properties and potentially thousands of connected systems like programmable logic controllers; the coalition's recommendation signals what private sector partners should expect in security requirements.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
government policy
Here’s how experts think CISA should tell agencies to protect OT
A coalition of cyber firms and critical infrastructure operators called for CISA to issue a binding operational directive requiring federal agencies to protect operational technology systems, following recent water utility attacks. The proposal recommends designating responsible parties, establishing minimum security practices, and leveraging existing guidelines to address gaps in federal OT visibility and policy consistency. The coalition cited a Government Accountability Office report showing most federal civilian agencies have not yet implemented 2023 Office of Management and Budget requirements for networked Internet of Things and OT devices.
Why it matters: Federal agencies and critical infrastructure operators must act because CISA currently lacks visibility into OT devices across government, creating exposure for 8,000 General Services Administration properties and potentially thousands of connected systems like programmable logic controllers; the coalition's recommendation signals what private sector partners should expect in security requirements.
- Source published
- First seen by Cybersecurity Tracker