cybersecurity for critical infrastructure … 2017 presentations... · •all nkp’s are...

CYBERSECURITY FOR CRITICAL INFRASTRUCTURE – LEGISLATION AND REGULATION C Pool - Proconics

Upload: hoangtruc

Post on 08-Mar-2019

214 views

Category:

Documents

0 download

Report

Download

Embed Size (px):

TRANSCRIPT

Page 1: CYBERSECURITY FOR CRITICAL INFRASTRUCTURE … 2017 Presentations... · •All NKP’s are automatically included •Responsibility of owner / operator of critical information infrastructure

CYBERSECURITY FOR CRITICAL INFRASTRUCTURE – LEGISLATION

AND REGULATIONC Pool - Proconics

Page 2: CYBERSECURITY FOR CRITICAL INFRASTRUCTURE … 2017 Presentations... · •All NKP’s are automatically included •Responsibility of owner / operator of critical information infrastructure

www.proconics.co.za

Contents• Who am I?

• Introduction

• Legislative• History

• Cybercrimes & cybersecurity bill – 2017

• OHSACT

• Standards

• Conclusion

• Questions

Page 3: CYBERSECURITY FOR CRITICAL INFRASTRUCTURE … 2017 Presentations... · •All NKP’s are automatically included •Responsibility of owner / operator of critical information infrastructure

www.proconics.co.za

Who am I?• 22 years in industry

• 14 years involved in process networks & security

• ECSA Pr. Eng

Page 4: CYBERSECURITY FOR CRITICAL INFRASTRUCTURE … 2017 Presentations... · •All NKP’s are automatically included •Responsibility of owner / operator of critical information infrastructure

www.proconics.co.za

Introduction• Cybercrime reported impact 2015 – R35billion

• 3rd most active country for cybercrime

• Industrial systems including smart grids at risk

• Aurora – grid specific

• General malware

Page 5: CYBERSECURITY FOR CRITICAL INFRASTRUCTURE … 2017 Presentations... · •All NKP’s are automatically included •Responsibility of owner / operator of critical information infrastructure

www.proconics.co.za

Legislation - History

ECT Act 2002

Draft CS policy 2010

Establish NCAC /

CSIRT 2013

National Integrated ICT Policy

Green paper 2014

1st Draft C&C Bill

2015

Revised C&C Bill

submitted to

Parliament 2017

Page 6: CYBERSECURITY FOR CRITICAL INFRASTRUCTURE … 2017 Presentations... · •All NKP’s are automatically included •Responsibility of owner / operator of critical information infrastructure

www.proconics.co.za

Legislation – C&C bill• Chapter 2 – definition of crime:

• Unauthorised access• Interference with data & essential services• Failure to comply can result in 2 year sentence

• All NKP’s are automatically included

• Responsibility of owner / operator of critical information infrastructure• Apply to have the infrastructure declared critical• Comply with directives (at own cost)• Audits to be performed every 24 months (Section 58)

• Security to be maintained according to national standards

• SSA – concerns expressed

Page 7: CYBERSECURITY FOR CRITICAL INFRASTRUCTURE … 2017 Presentations... · •All NKP’s are automatically included •Responsibility of owner / operator of critical information infrastructure

www.proconics.co.za

Legislation – OHSACT• Controversial

• GMR 3 & 4• ICS’s can be fined as part of machine assemblies

• Securing & safe operation regulations apply

• MHI Regulation 6 (Generally not applicable to Electricity distribution)• Risk assessments

• Audits

• Mitigation of risk

Page 8: CYBERSECURITY FOR CRITICAL INFRASTRUCTURE … 2017 Presentations... · •All NKP’s are automatically included •Responsibility of owner / operator of critical information infrastructure

www.proconics.co.za

Standards – SANS62443-2-1• SATS62443-1-1 also accepted

• Only part of IEC62443 suite

• CSMS• Risk analysis

• Addressing the risks

• Monitor and improve the CSMS

• Dependant on 2 principles• Defence in Depth (DiD) – this includes isolation of

functional and logical units

• Continuous monitoring and improvement.

Page 9: CYBERSECURITY FOR CRITICAL INFRASTRUCTURE … 2017 Presentations... · •All NKP’s are automatically included •Responsibility of owner / operator of critical information infrastructure

www.proconics.co.za

Standards – SANS62443-2-1

Page 10: CYBERSECURITY FOR CRITICAL INFRASTRUCTURE … 2017 Presentations... · •All NKP’s are automatically included •Responsibility of owner / operator of critical information infrastructure

www.proconics.co.za

Standards – SATR62443-3-1:2016• Implementation technologies

• Authentication & authorization – includes password management

• Filtering / blocking / access control – does not include physical access control, but includes firewalling

• Encryption & data validation – includes VPN’s

• Management, audit, measurement, monitoring & detection – includes antivirus, IDS and automated software management

• IACS software – covers the different operating systems

• Physical security – access control and personnel security

Page 11: CYBERSECURITY FOR CRITICAL INFRASTRUCTURE … 2017 Presentations... · •All NKP’s are automatically included •Responsibility of owner / operator of critical information infrastructure

www.proconics.co.za

Standards – SATR62443-3-1:2016

• Industry specific guidelines should be used• NERC CIP, NIST, ENISA

Page 12: CYBERSECURITY FOR CRITICAL INFRASTRUCTURE … 2017 Presentations... · •All NKP’s are automatically included •Responsibility of owner / operator of critical information infrastructure

www.proconics.co.za

Conclusion• ICS systems at risk

• Legislative impact

• Be proactive

Page 13: CYBERSECURITY FOR CRITICAL INFRASTRUCTURE … 2017 Presentations... · •All NKP’s are automatically included •Responsibility of owner / operator of critical information infrastructure

www.proconics.co.za

Questions?

Integrating cybersecurity and critical infrastructure - SIPRI

Cybersecurity in Modern Critical Infrastructure Environments-SECURE ICS_Overview_FINAL_2015

Improving Critical Infrastructure Cybersecurity Executive

Cybersecurity for Critical National Information Infrastructure

Framework for Improving Critical Infrastructure Cybersecurity Core

Critical Infrastructure Protection: Cybersecurity ... · Infrastructure Protection Plan (NIPP), which provides the overarching strategy for integrating the nation’s critical infrastructure

Industrial Cybersecurity and Critical Infrastructure Protection in Europe

Framework for Improving Critical Infrastructure Cybersecurity · 2015-08-26 · Executive Order: Improving Critical Infrastructure Cybersecurity “It is the policy of the United

Framework for Improving Critical Infrastructure Cybersecurity · PDF fileFramework for Improving Critical Infrastructure Cybersecurity Version 1.0 National Institute of Standards and

Framework for Improving Critical Infrastructure Cybersecurity · PDF fileFramework for Improving Critical Infrastructure Cybersecurity Version 1.1 Draft 2 National Institute of Standards

Framework for Improving Critical Infrastructure Cybersecurity · Improving Critical Infrastructure Cybersecurity “It is the policy of the United States to enhance the security and

Critical Infrastructure, Cybersecurity, and Market Failure

Framework for Improving Critical Infrastructure … cybersecurity...63 critical infrastructure. Cybersecurity threats exploit the increased complexity and connectivity of 64 critical

Cybersecurity in Critical Infrastructure – Operational Technology · 2020. 10. 24. · PwC | Cybersecurity in critical infrastructure – Operational Technology 16. Significant

Executive Order 13636: Improving Critical Infrastructure Cybersecurity

Critical Infrastructure Cybersecurity by Nadya Bartol

Framework for Improving Critical Infrastructure Cybersecurity · Cybersecurity Framework Current Charter Improving Critical Infrastructure Cybersecurity February 12, 2013 “It is

for Critical Infrastructure Cybersecurity · for Critical Infrastructure Cybersecurity with Cyberbit SCADAShield ICS/SCADA Security Solution ... but at the cost of opening previously

Cybersecurity: Critical Infrastructure Authoritative … · · 2017-04-24Cybersecurity: Critical Infrastructure Authoritative Reports and Resources Rita Tehan Information Research

Improving Critical Infrastructure Cybersecurity … Critical Infrastructure Cybersecurity Executive Order ... for improving critical infrastructure cybersecurity ... process itself,

Cybersecurity challanges for critical infrastructure …...Cybersecurity challanges for critical infrastructure protection Sergii Kavun Department of computer systems and technologies,

Critical Infrastructure and Cybersecurity

Cybersecurity for Critical Infrastructure (ICS, SCADA & IIoT) · Cybersecurity for Critical Infrastructure (ICS, SCADA & IIoT) Agenda • ICS Introduction • SANS ICS Security Survey

Framework for Improving Critical Infrastructure Cybersecurity · 8/26/2015 · Executive Order: Improving Critical Infrastructure Cybersecurity “It is the policy of the United

Cybersecurity Framework Overview Executive Order 13636 “Improving Critical Infrastructure Cybersecurity”

Framework for Improving Critical Infrastructure Cybersecurity, … · 2019-10-12 · Critical Infrastructure Cybersecurity Version 1.1 National Institute of Standards and Technology

NIST Cybersecurity Framework Explained · 2019-07-26 · Framework for Improving Critical Infrastructure Cybersecurity (the “Cybersecurity Framework”) • Framework Overview •

Framework for Improving Critical Infrastructure Cybersecurity · 2016-04-12 · Framework for Improving Critical Infrastructure Cybersecurity ... “It is the policy of the United

CYBERSECURITY ACT 2018 (ACT 9 OF 2018) CYBERSECURITY …€¦ · “critical information infrastructure” (“CII”) means “critical information infrastructure” as defined in

Securing your critical infrastructure - Siemens3... · 2020-03-08 · Securing your critical infrastructure RUGGEDCOM Cybersecurity Solutions. Cybersecurity from the inside out

ICS and Critical Infrastructure -Cybersecurity · industrial sectors and critical infrastructure. §Critical Infrastructure: term used to describe assetsthat are essential for the

Cybersecurity: Critical Infrastructure Authoritative ... · Cybersecurity: Critical Infrastructure Authoritative Reports and Resources Congressional Research Service Summary Critical

Framework for Improving Critical Infrastructure …blog.cybersecuritylaw.us/wp-content/uploads/2015/11/cybersecurity...Framework for Improving Critical Infrastructure Cybersecurity

Framework for Improving Critical Infrastructure Cybersecurity Overview and Status Executive Order 13636 “Improving Critical Infrastructure Cybersecurity”