NSA, CISA: How Cyber Actors Compromise OT/ICS and How to Defend Against It

Home / Articles / External / Government

Source: https://media.defense.gov/2022/Sep/22/2003082994/-1/-1/0/220922-D-IM742-1234.JPG
Source: https://media.defense.gov/2022/Sep/22/2003082994/-1/-1/0/220922-D-IM742-1234.JPG

October 4, 2022 | Originally published by NSA on September 22, 2022

FORT MEADE, Md. — The National Security Agency (NSA) and the Cybersecurity and Infrastructure Security Agency (CISA) published a Cybersecurity Advisory on September 22, 2022 that highlights the steps malicious actors have commonly followed to compromise operational technology (OT)/industrial control system (ICS) assets and provided recommendations on how to defend against them.

“Control System Defense:  Know the Opponent” notes the increasing threats to OT and ICS assets that operate, control, and monitor day-to-day critical infrastructure and industrial processes. OT/ICS designs are publicly available, as are a wealth of tools to exploit IT and OT systems.

Focus Areas