Two things that make ICS cybersecurity different from IT security are the use of industrial-specific protocols like DNP3 and the common usage of endpoints like PLCs, IEDs and RTUs that are 15+ years old. Both of these factors are significant in industries that depend on WAN communication networks, such as power, water/wastewater, transportation plus oil and gas systems.

An important best practice for industrial security is to implement a Defense in Depth strategy. With this approach, multiple layers of defense are implemented, in contrast to just one defense mechanism, such as a single firewall. A complementary best practice used as part of a Defense is Depth strategy is Zones and Conduits, as defined in the ISA IEC 62443 standard. This involves segmenting the network into zones of devices with similar security requirements and using conduits to restrict the communication between zones.

Energy and electric utility organizations are facing a range of challenges requiring a reevaluation of the cyber security within their industrial control networks, endpoints and controllers. On the one hand, operators have to face losing access to phone lines, securing transmission substations, meeting pressing NERC CIP audit requirements and worrying about Internet connections to vital systems. On the other hand, they are confronted with data and media coverage (eg. Ukraine power outage) that indicate an increase in cyberattacks on energy Industrial Control Systems (ICS).

While there are many benefits that have come to ICS and SCADA networks through the increased use of standard networking and Internet technologies, it has made the need to secure them ever more critical. Firewalls play an important role in blocking threats and containing internal cyber incidents that could impact safety, reliability and productivity. They control the flow of communications and filter packets to block or contain harmful network traffic.

Who hasn’t been frustrated when traffic comes to a standstill or the underground breaks down? Such frustration is a very real human emotion that lets us know that our highways, subways and light rail transit systems are vital for our lives to run smoothly. Add it up across thousands or millions of people: if transportation systems don’t work, entire economies and societies suffer.