CISA and Federal Partners Release Zero-Trust Guidance for Operational Technology
The Cybersecurity and Infrastructure Security Agency (CISA), in coordination with the U.S. Department of War (DOW), Department of Energy, FBI and Department of State, released joint guidance for organizations applying zero-trust principles to operational technology (OT).
The 28-page document aims to support OT owners and operators in addressing the challenges of transitioning to a zero-trust architecture. Zero trust offers a “modern, adaptive approach to cybersecurity by eliminating implicit trust and continuously validating access based on identity, context and risk.”
"The Department of War is driving zero trust for operational technology at an accelerated pace," said Kirsten Davies, DOW chief information officer, in a press release on April 29. "In lockstep with our federal and industry partners, we are fortifying the infrastructure and interconnected weapon systems our warfighters demand to fight and win. This is how we deliver peace through technical strength."
This guidance comes as cyber threats against operational technology continue to rise. According to the release, new attack vendors and cybersecurity risks are more prevalent because OT systems are increasingly interconnected, digitally monitored and remotely operated.
The guide provides OT owners and operators and zero-trust practitioners with practical insights on addressing challenges, overcoming unique constraints and prioritizing key areas for integrating zero trust into OT environments.
In lockstep with our federal and industry partners, we are fortifying the infrastructure and interconnected weapon systems our warfighters demand to fight and win.
FBI Cyber Division Assistant Director Brett Leatherman said, “This guide moves owners and operators from reactive to proactive. Resilience in OT isn't achieved through any single control; it requires layered defenses that raise the cost for adversaries at every stage.”
said “This guide equips organizations to methodically navigate the complexities of adopting zero-trust principles in OT environments. Together with our partners, CISA urges OT owners, operators and integrators to use this resource to make informed decisions that reduce exposure and strengthen resilience—without jeopardizing mission-critical operations,” said CISA Acting Executive Assistant Director of Cybersecurity Chris Butera.
Read more here.
Comments