SecurityBrief Asia - Technology news for CISOs & cybersecurity decision-makers
Story image
Dragos launches cybersecurity resource for industrial assets
Thu, 9th Jun 2022
FYI, this story is more than a year old

Dragos has launched Operational Technology - Cyber Emergency Readiness Team (OT-CERT), a cybersecurity resource made specifically for industrial asset owners and operators.

The offering will assist in helping them to build their OT cybersecurity programs, improve their security postures, and reduce OT risk.

Member businesses will have free access to OT cybersecurity best practices, cybersecurity maturity assessments, training, workshops, tabletop exercises and webinars delivered through the OT-CERT portal.

Dragos' latest offering will also coordinate with OEMs to manage disclosures for vulnerabilities discovered by its threat intelligence researchers and cyber threats detected by the company that are targeted at an OEMs' products.

Dragos notes that OEM partnerships are crucial to coordinating vulnerability disclosures and an effective threat response in the growing cyber threat landscape.

“Dragos' stated mission is to safeguard civilisation, and that means protecting all industrial infrastructure, not just the most skilled or the best resourced organisations,” Dragos' newly-appointed OT-CERT director Dawn Cappelli says.

“Our goal for Dragos OT-CERT is to be a useful, relevant, and actionable community resource for industrial asset owners and operators by aligning them with the resources, training, partnerships, and community needed to make securing their OT environments possible.

Organisations of all sizes are eligible for OT-CERT membership, with larger organisations benefitting from free resources such as OT best-practices blogs and OT vulnerability disclosures from the company's Threat Intelligence team.

In addition, Dragos OT-CERT will help large companies to improve the security posture of smaller organisations in their supply chain that can pose a risk to their business operations.

Dragos partnered with the National Association of Manufacturers (NAM) to launch this latest offering.

NAM represents 14,000 manufacturing companies in every industrial sector, supporting them by focusing on both identifying cyber threats and proactive security practices that are vital to making the entire supply chain more secure.

“The National Association of Manufacturers is deeply committed to supporting its members as they navigate the challenges and opportunities that arise from digital transformation and Manufacturing 4.0, and it's critical that their OT security remain paramount as they undertake this evolution,” NAM Chief Operating Officer Todd Boppell says.

“Of the National Association of Manufacturers' 14,000 member companies, 90 per cent are small and medium-sized manufacturers that often lack the kind of resources and OT cybersecurity teams that larger organisations have.

“Dragos OT-CERT is the first community-focused resource of its kind to provide practical solutions to this often under-served community.

Further initial Dragos OT-CERT partners include Emerson, Rockwell Automation, and four Information Sharing and Analysis Centres: E-ISAC (electricity), ONG-ISAC (oil and natural gas), DNG-ISAC (downstream natural gas), and WaterISAC.

“Industrial Infrastructure organisations, and the services they provide, impact all of our lives, and the operational technologies that underpin these organisations are under attack now more than ever before,” Emerson Automation Solutions cybersecurity strategy, governance and architecture director Michael Lester says.

“We're eager to work with Dragos OT-CERT in its mission to protect OT infrastructure by partnering on threat and vulnerability discovery and mitigation as well as assets for resource-constrained organisations.