Infrastructure – РИСК-АКАДЕМИЯ – АНО ДПО ИСАР

Why 360-degree visibility is vital to protect critical infrastructure

riskacademy — Tue, 03 Nov 2020 14:16:00 +0000

Aaron Ross, APAC Manager of Technical Services at Paessler, tells us without 360-degree visibility those responsible for safeguarding the sanctity of an organization’s data are flying blind. He says: “CIOs trying to solve the visibility issue are frustrated with too many complex, reactive solutions, which makes them vulnerable to sophisticated threats and attacks, as well as network downtime.”

360-degree visibility is a fundamental cybersecurity and IT risk management strategy that will help to protect critical infrastructure assets and sensitive information. But the increasing complexity of distributed enterprise networks makes this extremely challenging. Digital Transformation is increasing the complexity due to IT infrastructures becoming borderless. The key issue here is that you cannot protect critical infrastructure assets you cannot see.

According to a report by Deloitte – The Value Of Visibility – Cybersecurity Risk Management Examination, implementing a sound cybersecurity and IT risk management program is essential to protecting brands and can give organizations a jump in addressing mounting regulatory requirements.

This includes the Australian…

Cybersecurity Framework Version 1.1 Manufacturing Profile: NISTIR 8183 Revision 1

riskacademy — Thu, 08 Oct 2020 10:35:48 +0000

NIST announces the publication of NISTIR 8183 Revision 1, Cybersecurity Framework Version 1.1 Manufacturing Profile. This revision of the CSF Manufacturing Profile includes the sub-category enhancements established in NIST’s Framework for Improving Critical Infrastructure Cybersecurity Version 1.1; these updates include managing cybersecurity within the supply chain, self-assessing cybersecurity risk, vulnerability disclosure, system integrity, and more comprehensive controls for identity management. Additional changes include updating language to change references from “security levels” to “impact levels.”

The Manufacturing Profile was developed for manufacturers managing cybersecurity risk and is aligned with manufacturing sector goals and industry best practices. The Manufacturing Profile provides a voluntary, risk-based approach for managing cybersecurity activities and reducing cyber risk to manufacturing systems. The Manufacturing Profile is meant to enhance but not replace current cybersecurity standards and industry guidelines that the manufacturer is embracing.

/Public Release. The material in this public release comes from the originating organization and…

5 supply chain cybersecurity risks and best practices

riskacademy — Fri, 18 Sep 2020 23:24:41 +0000

The rise of supply chain cyberthreats in the wake of COVID-19 have made a solid risk management plan even more essential than it always has been.

Supply chain cyberattacks put organizations at significant risk — risk that can disrupt their operations and damage their reputations.

Supply chain cyberattacks are on the rise and hackers are targeting every company in the supply chain ecosystem from the end-user organization to the software providers to the suppliers, said Mark Atwood, managing vice president of supply chain research at Gartner Inc.

COVID-19 has just ratcheted up a trend that was already happening.

In 2019, 40% of manufacturers had operations that were affected by a cyber incident, according to a report from Deloitte released on May 6. And from March to May of this year, there was an increase in supply chain attacks related to COVID-19, the report’s authors noted.

While definitive numbers may be hard to pinpoint, the trend is clear.

“Bad actors will act wherever they see an opportunity,” according to the Gartner supply chain cybersecurity report, co-written by Atwood. “Supply chains, which extend the envelope of enterprise risks to all business ecosystem…

CISA’s new plan to protect critical infrastructure

riskacademy — Sat, 08 Aug 2020 23:35:18 +0000

Best listening experience is on Chrome, Firefox or Safari. Subscribe to Federal Drive’s daily audio interviews on Apple Podcasts or PodcastOne.

It might be critical, but infrastructure in the United States has remained stubbornly difficult to protect from cyber and physical attacks. Now the Cybersecurity and Infrastructure Security Agency has a new five-year plan for an important subset of critical infrastructure, namely industrial control systems. With details of the plan, Federal Drive with Tom Temin turned to the deputy assistant director of cybersecurity at CISA, Richard Driggers.

Tom Temin: Mr Driggers, good to have you on

Richard Driggers: Good morning. Thank you for having me.

Tom Temin: What is the fundamental challenge in protecting control systems? Earlier, 20 years ago, none of them were connected generally to the internet, and now they all are,. Is that the basic problem here?

Richard Driggers: I mean, I think that that’s the crux of it. I mean, the biggest challenge is a lot of these ICS devices that we find in our critical infrastructure, they were installed a long time ago and really used to create efficiencies internal into the facility. And so…

State-Sponsored Cyber Attacks Threaten Australian Critical Infrastructure

riskacademy — Thu, 02 Jul 2020 08:04:39 +0000

The discussion around state-sponsored cyber attacks on Australia has once again launched to the fore in the country following comments by the Prime Minister Scott Morrison on June 19. According to the new remarks, Australian institutions of all kinds have fallen victim to cyber attacks from a sophisticated state based cyber-actor over at least the course of the last several months, raising alarm about the vulnerability of the country’s critical infrastructure.

The attacks are taking place against all levels of governments as well as services and businesses in Australia, according to Morrison, with their frequency having increased “over many months”.

“I’m here today to advise you that, based on advice provided to me by our cyber-experts, Australian organisations are currently being targeted by a sophisticated state-based cyber-actor,” Morrison said at a press conference. He added that such attacks have been targeting organizations “across a range of sectors, including all levels of government, industry, political organisations, education, health, essential service providers and operators of other critical infrastructure”.

Although identified as being…

Building a Framework for Critical Infrastructure Cybersecurity

riskacademy — Sat, 13 Jun 2020 12:18:52 +0000

Given the blossoming of attacks on organizations — from energy to health care firms — the need for robust critical infrastructure cybersecurity has expanded.

Takeaways include the following:

Critical infrastructure protection is a long-standing priority, but many organizations lag in their response to cyberthreats.
COVID-19 has broadened the definition of critical infrastructure while also providing a reminder for enterprise companies to question which systems are essential to operations. This article builds on the advice in chapter one of this series in “Addressing IoT Security Challenges From the Cloud to the Edge.”
Organizations managing critical infrastructure should develop a proactive cybersecurity posture, but coronavirus-led disruptions heighten the challenge.

By now, the need for comprehensive cybersecurity for critical infrastructure is clear. Public accounts are widespread concerning the risk of malicious actors targeting the electrical grid, dams, voting systems and other federally designated critical infrastructure. But the majority of organizations that provide essential services have taken only incremental steps in addressing cyber…

Gareth Byatt has interviewed former #Infrastructure SiG Chair Darren Mullan abou…

riskacademy — Tue, 19 Feb 2019 13:05:12 +0000

Gareth Byatt has interviewed former #Infrastructure SiG Chair Darren Mullan about #riskmanagement within the infrastructure industry.

Their Q&A session covers the various issues faced by infrastructure projects carried out in different parts of the world.

Read the #interview: http://ow.ly/HDi030nJHzc

Присоеденяйтесь к официальной группе ИСАР в Facebook