Industrial Infrastructure Cybersecurity Requirements are Expanding, and OT-CERT is Here to Help!
Summary: The White House released its National Cybersecurity Strategy on March 2, 2023, calling for expanded minimum cybersecurity requirements in critical sectors, and the EPA followed the next day with a memorandum requiring states to audit the cybersecurity practices of local drinking water systems. Dragos says many organizations hit by these mandates are small and medium businesses without the people or budget to secure their ICS/OT environments, and it launched OT-CERT in June 2022 to provide free toolkits, templates, and guides written for a non-security audience; OT-CERT now has almost 900 members in over 50 countries.
Why it matters: The mandates land on small water utilities and other SMBs that lack OT security staff, and the article warns that more oversight beyond the water sector is likely coming to other industries. It also asks whether your risk assessment accounts for an attack on a critical supplier, and whether you could still produce your product or serve customers if that supplier went down.
Read the original at Dragos Blog ↗
- Topics
- OT / ICS & Critical Infrastructure
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026