Cybersecurity: Critical Infrastructure

Applicable Standards for Industrial Cybersecurity under NIST-CF:

• Special publication 800-82 Rev3 - Guide to Operational Technology (OT) Security
• Special publication 800-53 Rev 5 - Security and Privacy Controls for Information Systems and Organizations
• Special publication 800-171 - Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations
• Special publication 800-207 - Zero Trust Deployment
  

Cybersecurity attacks referenced in the discussion:

• Oldsmar, FL water ransomware attack
• Tulsa, OK ransomware attack

Overview of the NIST Cybersecurity Framework:

• Cybersecurity Part 4 - Prevent, Detect, and Recover From Cyber Incidents

Executive Orders, Legislation, and Governmental Resources:

• Executive Order 13636 - Improving Critical Infrastructure Cybersecurity
• Executive Order 14028 - Improving the Nation's Cybersecurity
• S.2491 - Defense of United States Infrastructure Act of 2021
• S.3600 - Strengthening American Cybersecurity Act of 2022
• Cybersecurity Preparedness Grants - HSEMA Grants Management Support
• Cybersecurity Preparedness Grants - Summary of Grant Program
• Sectors of Critical Infrastructure
  

Institutions discussed:

• CISA
• Cyberspace Solarium Commission
• SANS