NSA and U.S. Agencies Issue Best Practices for Open Source Software in Operational Technology Environments

Home / Articles / External / Government

Source: https://media.defense.gov/2023/Oct/10/2003316465/-1/-1/0/231010-D-IM742-4446.JPG
Source: https://media.defense.gov/2023/Oct/10/2003316465/-1/-1/0/231010-D-IM742-4446.JPG

October 24, 2023 | Originally published by NSA on October 10, 2023

FORT MEADE, Md. – The National Security Agency (NSA) is joining U.S. federal partners to release cybersecurity guidance to promote understanding of open source software (OSS) implementation and provide best practices to secure operational technology (OT) and industrial control systems (ICS) environments.

OSS is software with an open license for anyone to view, use, study, or modify and is distributed with its source code. The diverse way in which OSS can be integrated into OT products can make it difficult to know whether particular software modules and their associated vulnerabilities are present and/or exploitable.