Call us now:
We’ve discussed the use of Whistleblower programs and here is another example. As the U.S government is investigating Rockwell automation and its use of its Chinese operations for code development, vulnerability and patch management. With investigators from the Energy Department, Defense Department and Justice Department’s commercial litigation branch, examining claims made by a Whistleblower.
The Whistleblower claim is that Rockwell uses its Chinese operations for code development, vulnerability and patch management of its products. Products that are used in CNI and Defense, that could have the potential to allow for the development of vulnerable code, or knowledge of vulnerabilities before they are addressed.
Rockwell kit such as its plc’s, SCADA and process automation is central to CNI providers products. Kit such as that from Rockwell sits at the center of the management and control of physical infrastructure.
It is not FUD to believe that having such critical code developed in other nation states could have similar repercussion’s to the SolarWinds issues of 2019. If not more severe. A debate that will no doubt come out through the investigation process, that seems to have been staffed up significantly.
One wonders if other OT manufacturers are effected by similar supply chain risks, and the affects on national security and the security of CNI providers.
Ted Dziekanowski Rachel V. Rose, JD, MBAStephen Pitt-Walker, JD, FGIA
#cybersecurity #cyberrisk #otsecurity #nationalsecurity
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7062397783789449217