TSA Issues Revised Security Directive Requirements for US Pipelines
Erin Anderson
On July 21, 2022, the TSA announced that they have revised and reissued their Security Directive on oil and natural gas pipeline cybersecurity to focus on performance-based measures to enhance security and resilience. …
PHMSA Fines Colonial Pipeline Almost $1 Million, Citing Failure to Adequately Plan for Manual Restart
The US DoT’s Pipeline and Hazardous Materials Safety Administration (PHMSA) issued a Notice of Probable Violation (NOPV) and Proposed Compliance Order to Colonial Pipeline Company for close to $1 million almost exactly one year after crippling ransomware attack. …
White House Urges Private Companies to Strengthen Cybersecurity, Citing Intelligence on Escalating Cyberthreats
The Biden White House has warned private sector companies to strengthen their cybersecurity practices, citing intelligence reports indicating that Russia is looking at options for cyberattacks against the United States. …
Shields Up: 6 Actions to Fortify Your OT Security
CISA has issued a “Shields Up” alert encouraging organizations increase their cybersecurity focus. Here are 6 actions to take now to prevent or detect a potential cyberattack on your OT systems. …
3 Tips for Rail Operators to Get Started with ICS Cybersecurity
To keep passengers and crew safe, transportation organizations must implement preventative cybersecurity measures to avoid cyberattacks. Here are 3 tips to get rail operators started with ICS security. …
A Guide to NIS Directive Compliance
Learn what the NIS Directive is, who it applies to, potential penalties for non-compliance and best practices for complying with the Directive. …
A Guide to NEI 08-09 Compliance for Nuclear Power Operators
Nuclear operators are subject to NEI 08-09 Cyber Security Plan for Nuclear Power Reactors compliance to protect the public from radiological sabotage resulting from a cyberattack. …
How to Approach IoT Cybersecurity for Smart Buildings
IT and facility management teams must consider people, process and technology when addressing cybersecurity risks from the IoT in smart buildings. …
What Does the National Maritime Cybersecurity Plan Mean for the MTS?
The National Maritime Cybersecurity Plan highlights the role of the MTS in national security and the supply chain and the need to keep it cyber resilient. …
MITRE ATT&CK for ICS Matrix: What It Is and How Its Used
The MITRE ATT&CK for ICS Matrix helps security teams make their overall risk discussion more meaningful. This primer discusses what it is and how it’s used. …
