The Operational Technology Cybersecurity Coalition (OTCC) issued a white paper recommending Binding Operational Directives for OT cybersecurity. The OTCC recommendations are dangerously incomplete as they do not address control system field device issues. A compromised OT network does not necessarily mean that the control system or physical equipment have been compromised. Conversely, control systems and physical equipment can be compromised or damaged without the OT network itself being compromised. Protecting OT network communications alone therefore cannot ensure the integrity, safety, or reliability of physical processes. Recommendations are provided to make the Binding Operational Directives complete.
Tue, Oct 13
OTCC recommendations for binding operational directives are dangerously incomplete
1