All UK Critical National Infrastructure is at risk from cyber attacks. As demonstrated by the incident reported by The Telegraph newspaper, a UK power plant was shut down for 4 days following a cyberattack. A cyber attack reported to have…
The UK Governments cybersecurity agency the NCSC has updated its Cybersecurity Assessment Framework (CAF) this week, to reflect the increased threat of cyberattack to UK Critical National Infrastructure (CNI). Making significant changes to remote access, privileged operations, user access levels…
Thank you for posting @Thaddeus Dziekanowski, CNI is a target for a variety of reasons. Demonstrated by recent events such as the Baltimore Ship disaster and cyber attack on UnitedHealth in February, CNI is critical to the functioning of society.…
An important and comprehensive read. As U.S, Canadian, UK, Australian and New Zealand Governments cyber agencies release an advisory on the cyber threat posed by the Peoples Republic of China. Reiterating what was discussed with the U.S House Select Committee…
The U.S has imposed sanction on six Iranian officials that it says are responsible for cyber-attacks on American water plants in 2023. The sanctioned individuals are part of the IRGC’s Cyber-Electronic Command (IRGC-CEC), and include Hamid Reza Lashgarian, the head…
It’s a very long game, and one does not think we’ve gotten to the end of the 1st quarter. Speaking in an open forum the director of the U.S Cybersecurity and Infrastructure Security Agency (CISA) Jen Easterly commented. “I hope…
The U.S Cyberspace Solarium Commission (CSC) report on cybersecurity for Critical national Infrastructure (CNI) raises opportunities and challenges for cybersecurity for CNI in the U.S and the governments move to update Presidential Policy Directive 21 (PPD-21), which established the current…
One is not sure that the energy market is going to be able to avoid cybersecurity for much longer. EU NIS, the SEC proposal and Australians CNI cyber regulations lay the ground for cybersecuirty risk management compliance. With ONCD making…
A sustained focus on CNI providers specifically power generators, as malware that focuses on OT communications used in power networks has been discovered my Mandiant. OT and ICS malware is not widespread, but as the report discusses, the barriers to…
The enclosed report from the Atlantic council is a good read. An acknowledgement of the challenges that securing Critical National Infrastructure from cyber attacks, the need for a risk-based approach for cybersecurity risk management and outlining a potential methodology. Securing…
