Dragos OT-CERT improves the security posture of owners and operators of industrial assets


Dragos has launched its new Dragos OT-CERT (Operational Technology – Cyber ​​Emergency Readiness Team), a cybersecurity resource designed for owners and operators of industrial assets to help them build their OT cybersecurity programs, improve their postures safety and reduce OT risks.

Delivered through the OT-CERT portal, member organizations will have free access to OT cybersecurity best practices, cybersecurity maturity assessments, training, workshops, tabletop exercises, webinars, and more. In addition, OT-CERT will coordinate with OEMs disclosures of vulnerabilities discovered by Dragos threat intelligence researchers, as well as cyber threats detected by Dragos targeting OEM products. OEM partnerships are essential for coordinated vulnerability disclosure and effective threat response to protect and support industrial infrastructure in an escalating cyber threat environment.

Dragos OT-CERT fills a serious gap in securing industrial infrastructure: the lack of OT-specific resources readily available to the industrial infrastructure community. The gap is particularly critical among small and medium enterprises which often have limited expertise and resources to address ICS/OT cybersecurity risks. According to Gartner, “Enterprises continue to face acute and growing shortages of OT security skills to drive and support IT/OT integration, and securely support digital transformation efforts.1”

“Dragos’ stated mission is to safeguard civilization, and that means protecting all industrial infrastructure, not just the most skilled or best-resourced organizations,” said Dawn Cappelli, new OT-CERT director at Dragos. “Our goal for Dragos OT-CERT is to be a useful, relevant and actionable community resource for industrial asset owners and operators by aligning them with the resources, training, partnerships and community needed to make securing possible of their OT environments.”

Organizations of all sizes are eligible for OT-CERT membership. Larger organizations will benefit from free resources such as OT best practices blogs and OT vulnerability disclosures from Dragos’ industry-leading Threat Intelligence team. Dragos OT-CERT will also assist large enterprises by helping improve the security posture of smaller organizations in their supply chain that may pose a risk to their business operations.

Partnerships are critical to the success of OT-CERT, allowing ICS/OT practitioners to leverage their combined experience, collectively raise awareness of ICS cybersecurity issues, and contribute to the ICS community for long-term impact on the ‘industry.

In launching this new resource, Dragos has partnered with the National Association of Manufacturers, which represents and supports 14,000 manufacturing companies across all industry sectors with a focus on both identifying cyber threats and best practices. proactive security measures that are essential to making the entire supply chain safer. .

“The National Association of Manufacturers is deeply committed to supporting its members as they navigate the challenges and opportunities that arise from digital transformation and Manufacturing 4.0, and it is essential that their OT security remains paramount as they undertake this development,” said Todd Boppell, Chief Operating Officer, National Association of Manufacturers (NAM). “Of the 14,000 member companies of the National Association of Manufacturers, 90% are small to medium-sized businesses that often lack the kind of OT cybersecurity resources and teams that larger enterprises have. Dragos OT-CERT is the first community resource of its kind to provide practical solutions to this often underserved community.

“Industrial infrastructure organizations and the services they provide impact all of our lives, and the operational technologies that underpin these organizations are under attack like never before,” said Michael Lester, Chief Strategy Officer, governance and cybersecurity architecture for Emerson’s Automation. Solution company. “We look forward to working with Dragos OT-CERT in their mission to protect OT infrastructure by partnering in the discovery and mitigation of threats and vulnerabilities, and assets for organizations with limited resources. .”

“As the cyber threat environment intensifies and cyberattacks increasingly affect industrial infrastructure, we are excited to team up with Dragos OT-CERT to raise awareness of the risks to the ICS/OT community and as needed OT cybersecurity,” said Tony Baker, product security manager at Rockwell Automation. “This free resource comes at the right time, and OEM collaboration will help enable effective threat response and coordinated vulnerability hunting.”

Initial Dragos OT-CERT partners include the National Association of Manufacturers, Emerson, Rockwell Automation, and four Information Sharing and Analysis Centers: E-ISAC (electricity), ONG-ISAC (petroleum and natural gas), DNG-ISAC (Downstream Natural Gas), and WaterISAC.

Previous The 5 players Liverpool will sell to fund Darwin Nunez's £85m move
Next Coinstreet and StormHarbour Hong Kong Launch Pioneering Secured Debt Offering in Conventional Notes and Blockchain Tokens | New