NIST Releases Draft of Cybersecurity Framework Profile for Ransomware Risk Management
Steve Kardon
NIST has released a new draft of the NISTIR 8374 Cybersecurity Framework Profile for Ransomware Risk Management which provides updated guidance for preventing and recovering from ransomware. …
Cyber Incident Reporting for Critical Infrastructure Act of 2021 Introduced by US House of Representatives
The U.S. House Homeland Security Committee has introduced the Cyber Incident Reporting for Critical Infrastructure Act of 2021, which would require critical infrastructure firms to disclose cybersecurity incidents to CISA within 72 hours of discovery. …
An Overview of the Proposed Revisions to NERC CIP-004 and CIP-011
Proposed revisions to two NERC CIP standards have been submitted to the Federal Energy Regulatory Commission (FERC) for consideration. The two affected standards are CIP-004 and CIP-011. …
Meat Packing Giant JBS Hit with Cyberattack
Earlier this week, a targeted cyberattack hit JBS, a global meat processor, which resulted in the closure of several processing plants in the US and Australia. …
DHS Issues Pipeline Cybersecurity Directive
The Department of Homeland Security (DHS) will soon issue cybersecurity regulations for the pipeline industry as a result of the Colonial Pipeline incident. …
Biden Extends Huawei Ban and Issues New Guidance on Improving Cybersecurity
On May 11, 2021, the Biden Administration issued an Executive Order aimed at strengthening both IT and OT cybersecurity in the United States. …
Biden Administration Announces Plan for Electric System Cybersecurity
On April 20, 2021, the Biden Administration announced a new approach to address cybersecurity risks to safeguard critical energy infrastructure. …
An Overview of CISA’s ICSA-21-056-03 Advisory for Rockwell Automation Logix Controllers
On February 25, 2021, the Cybersecurity and Infrastructure Security Agency (CISA) released ICS Advisory ICSA-21-056-03 related to vulnerabilities in Rockwell Automation Logix Controllers. …
Summary of NERC CIP Requirements
A summary of NERC CIP requirements in Haiku poetry format, as an aid to remembering the subject area for each requirement. …
Florida Water Treatment Plant Hit With Cyber Attack
A recent cyber attack on a Florida water treatment plant further reinforces the need for proactive cybersecurity measures at critical infrastructure facilities. …