- Tools and Resources -

Legacy industrial protocols lack the basic authentication and integrity checks necessary to prevent a threat actor from impersonating a device or modifying a message in transit. Despite this security weakness, the control systems community has not widely adopted the secure versions of these protocols that enable secure communication.

The FBI has launched a two-month campaign, Operation Winter SHIELD (Securing Homeland Infrastructure by Enhancing Layered Defense), highlighting 10 actions organizations can use to protect against cyberattacks. The recommendations were developed with domestic and international partners and based on recent cyber investigations to reflect adversary behavior and defensive gaps. 

CISA encourages organizations to implement an insider threat mitigation program that combines physical security, cybersecurity, personnel awareness, and partnerships from the community. Assembling a Multi-Disciplinary Insider Threat Management Team is a critical part of this process.