security

CISA, FBI, NSA, and Treasury Release Guidance on OSS in IT/ICS … – CISA


Today, CISA, the Federal Bureau of Investigation, the National Security Agency, and the U.S. Department of the Treasury released guidance on improving the security of open source software (OSS) in operational technology (OT) and industrial control systems (ICS). In alignment with CISA’s recently released Open Source Security Roadmap, the guidance provides recommendations to OT/ICS organizations on:

  • Supporting OSS development and maintenance,
  • Managing and patching vulnerabilities in OT/ICS environments, and
  • Using the Cross-Sector Cybersecurity Performance Goals (CPGs) as a common framework for adopting key cybersecurity best practices in relation to OSS.

Alongside the guidance, CISA published the Securing OSS in OT web page, which details the Joint Cyber Defense Collaborative (JCDC) OSS planning initiative, a priority within the JCDC 2023 Planning Agenda. The initiative will support collaboration between the public and private sectors—including the OSS community—to better understand and secure OSS use in OT/ICS, which will strengthen defense against OT/ICS cyber threats.   

CISA encourages OT/ICS organizations to review this guidance and implement its recommendations.



READ SOURCE

Readers Also Like:  Data breach at healthcare tech firm impacts 4.5 million patients - BleepingComputer

This website uses cookies. By continuing to use this site, you accept our use of cookies.