CISA urged to issue binding OT security directive
The Operational Technology Cybersecurity Coalition (OTCC) wants the US Cybersecurity and Infrastructure Security Agency (CISA) to set mandatory minimum security standards for operational technology (OT) run by federal agencies. OT is the hardware and software used to monitor and control physical infrastructure.
The group published a white paper on Tuesday. It asks CISA to issue a new binding operational directive (BOD) focused on OT. A BOD is an order from CISA that federal civilian executive branch (FCEB) agencies must follow.
Water attacks as a warning
OTCC pointed to recent attacks on hundreds of water systems in at least 12 US states. In its view, these attacks show that OT now attracts both nation-state actors and cybercriminals.