View This Email In Your Browser

ICS Security: Friday News and Notes

2023 - Week 4

US NIST released details on the major changes proposed for version 2 of the Cybersecurity Framework scheduled for a winter 2024 release. The addition of a Govern function, to the existing Identify, Protect, Detect, Respond and Recover functions, is the biggest change. They will also be issuing a CSF Profile Template that could result in a more consistent look to profiles.
 

Only 81 Tickets Left For S4x23

Links

• My article this week: What's In A Name?
• Nozomi announces an endpoint sensor addition to their offering. I'll write about this in next week's article.
• I'm breaking my GAO report newsletter ban to link to an article demonstrating why they are banned.
• ZDI will hold an automotive Pwn2Own competition in Tokyo, Jan 2024.
• NRECA's 10 cyber goals for electric cooperatives in the US.
• Cybersecurity regulations for rail in the EU.
• On my reading list: Draft ISA-TR84-00-09 Part 1: Cyber Security Related To The Safety Cycle.
• Consumer Reports paper making the case to move to memory safe programming languages. Coming from Consumer Reports makes it noteworthy.

Unclassified Ads

Friday News & Notes Unclassified Ads. Here's how to reach the early adopters in OT & ICS Security.

Software Supply Chain Visibility Is The New Business Imperative. See how aDolus delivers continuous supply chain security at scale. Automate vulnerability management, reduce risk, prove compliance, gain operational insights, and get enriched SBOMs and VEX documents.

Cyber-Attack Recovery in only 30 Seconds! Salvador Technologies provides solutions for operational continuity for ICS & OT systems, that minimize downtime and enable an ideal RTO for critical assets. For HMI, SCADA, BMS, and other critical computer systems based on Windows.
 

Forwarded This Email and Want To Get It Every Friday?