Page 33 - Cyber Defense eMagazine for September 2020

Industrial Control System - Security Focus of Federal

Effort
By Trip Hillman, Director of Cybersecurity Services at Weaver

More and more, industrial control systems have been the targets of malware, ransomware and other
kinds of cyberattacks. These attacks jeopardize operations that control essential service and critical
functions, and may result in loss of life, property damage and disruption of essential services, such as
electricity, water and telecommunications.

Industrial enterprises that operate SCADA (Supervisory Control and Data Acquisition) and ICS (Industrial
Control System) devices are even more likely to be vulnerable to these cybersecurity threats. With
SCADA system life cycles reaching 15 years or longer, older devices may be more sensitive or may not
be compatible with newer computers and protection measures. This makes them more vulnerable to
cyberattack, which can lead to breaches of connected networks, of physical plant operations,
environmental controls, or even life- threatening safety failures.

The Cybersecurity and Infrastructure Security Agency (CISA) recently announced an initiative to
strengthen and secure industrial control systems in response to such growing cybersecurity threats and
risk management issues.

CISA was created in 2018. Part of the federal Department of Homeland Security, it is responsible for
functions previously performed by the U.S. Computer Emergency Readiness Team (US-CERT) and the
Industrial Control Systems Cyber Emergency Response Team (ICS-CERT).

This new initiative signals the federal agency’s intention to bring resources and focus to ICS security to
drive meaningful, measurable and sustainable change.

Cyber Defense eMagazine – September 2020 Edition 33
Copyright © 2020, Cyber Defense Magazine. All rights reserved worldwide.