Cyber Risks · Dragos Blog

Developing a Cybersecurity Plan of Action: Lessons Learned From Our Pipeline Customers

Summary: The Biden Administration released a 100-day initiative to improve cybersecurity across hazardous liquid and natural gas pipelines, complementing TSA security directives that require pipeline owners and operators to implement protections in their IT and OT environments. Dragos, working with pipeline customers on OT cybersecurity assessments, said the two questions it keeps hearing concern gaining visibility into OT architecture and building an incident response plan, and it notes many customers are under-invested in both cybersecurity resources and technology.

Key Takeaway: Dragos reports that its response efforts are consistently challenged by not having the necessary logging and artifacts to conduct investigations, a gap that surfaces only when an intrusion is already underway. The ONG-SCC has published an ICS Pipeline Initiative Functional Reference Guide for operators evaluating ICS security technology.

Read the original at Dragos Blog ↗

Topics
OT / ICS & Critical Infrastructure
Related
Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026