The U.S. Department of Homeland Security has significant information available to implement cybersecurity for Industrial Control Systems (ICS). This applies to system integrators' internal operations as well as delivered systems. To start, see their “2014 year in review.” Here is a continuation of information provided in the June newsletter.
Assessments
ICS-CERT offers stakeholders the Cyber Security Evaluation Tool (CSET) to assist organizations with protecting their key national cyber assets. CSET provides a systematic approach for assessing the security posture of their cyber systems and networks. ICS-CERT offers CSET in multiple formats, including download and a CSET CD. ICS-CERT also offers onsite training and guidance to asset owners using CSET during onsite assessments. Onsite assessments are conducted at no cost to the asset owners. For questions or comments, please email CSET@hq.dhs.gov
Incident response & vulnerability coordination
ICS-CERT provides stakeholders with extensive on-site, analytical, and information sharing resources to support mitigation of, and response and recovery from cybersecurity incidents impacting ICS. This includes a range of information products to support ICS threat and incident awareness. Examples include:
- ICS-CERT Advisories: Timely information about current security issues, vulnerabilities, and exploits .
- ICS-CERT Alerts: Notification to critical infrastructure owners and operators concerning threats or activity with the potential to impact critical infrastructure computing networks.
- ICS-CERT Monitor Newsletters: A service to personnel actively engaged in the protection of critical infrastructure assets.
- Joint Security Awareness Reports: Provide awareness for or solicit feedback from critical infrastructure owners, integrators, and other stakeholders related to ongoing cyber activity.
- Other Reports: Includes ICS-CERT Technical Information Papers, Annual Reports, and other products that ICS-CERT of interest to those engaged in protecting industrial control systems.
More information related to ICS-CERT’s incident response support and information products is available here.