Cyber Security For Public Services Critical Infrastructure - Best Practices (January 13th 2023)

Summary

This document, dated January 13th 2023, is titled Cyber Security For Public Services Critical Infrastructure - Best Practices. Its agenda covers why cyber security is important, lessons learnt, industry affiliations, what Industrial Control Systems (ICS) are, challenges with ICS cyber security, best practices for ICS, and Q&A. Experiences listed include Pierce County (Vulnerability Assessment and Penetration Testing) and San Mateo County (Sheriff's Network Security). It describes ICS as managing how machines and machine processes work, with water treatment plants as the example, and lists challenges such as legacy systems that do not comply with modern security requirements and critical infrastructure that is no longer air-gapped.

Summary drafted by a model from the document's text below and checked by script against that text before publication. It is a navigation aid, not a reading of what the document proves. Where AI is used

Full text

Cyber Security For Public
Services Critical Infrastructure -
Best Practices
January 13th 2023
Agenda
▪   Why cyber security is important?
▪   Our lessons learnt
▪   Industry Affiliations
▪   What are Industrial Control Systems (ICS)?
▪   Challenges with ICS cyber security
▪   Best Practices for ICS
▪   Q&A
Why Is Cyber Security Important?
Our Experiences From Recent Projects

1. Pierce County (Vulnerability Assessment and Penetration Testing)

2. San Mateo County (Sheriff’s Network Security)

3. 5G Network Security (Tier 1 Telecom Service Provider)

4. 5G Smart City Video Analytics Use-Case (R&D)
SAC Active
Members –
Industry
Affiliations
What Are Industrial Control Systems (ICS)
Industrial Control Systems (ICS) manage
how machines and machine processes in
Industrial setup work


Water Treatment Plants:

 Control Valves to shut-off/ switch on
 Chemical sensors (potability of water)
 Flow sensors & meters
 chlorine analyzers
and more which make the water safe for us to
drink and use
Why Do We Need Industrial Control Systems?
Benefits:
 Provide real-time data and remote
  management
 Reduces downtime
 Provides operational efficiencies

Water treatment example:
 Ensure clean drinking water
 Ensure consistent delivery of water to
  communities
Challenges In Securing Industrial Control Systems

• Legacy systems do not comply with modern security requirements
▪ Lack of security in engineering protocols (because these were never meant
  to be on the IT network)
▪ Security updates affect operations and cause down-time
▪ Need to re-test engineering systems after upgrades
▪ Lack of standardized technology and equipment
▪ Critical Infrastructure is no longer air-gapped (IT & OT)
Best Practices For Industrial Control Systems




Risk Management &   Physical Security   ICS Network      ICS Network
   Cybersecurity                         Architecture      Perimeter
    Governance                                            Architecture




  Host Security        Security         Supply Chain    Human Element
                      Monitoring        Management
Q&A


File and source

File

2023-01-13_a30311_d247445_sac-cyber-security-for-public-services-critical-infrastructu.pdf

Size

2,200,308 bytes

SHA-256

a8fac9305d69d470150cf428b91bb06bb482e2aebf80ed3c116ce5a5ee7e7f56

Our copy

2023-01-13_a30311_d247445_sac-cyber-security-for-public-services-critical-infrastructu.pdf

Original

app.leg.wa.gov