Honeywell’s Post

It's well known that Idaho National Laboratory has been at the forefront of developing industrial cybersecurity solutions to protect critical infrastructures for at least two decades. Despite all our successes, it's still a big deal when The White House recognizes our laboratory by name as a leading expert in creating industry-driven solutions. 👏   ➡️➡️“This builds on the White House Council on Supply Chain Resilience’s work to strengthen supply chains critical to America’s economic and national security. It also builds upon the efforts of the U.S. Department of Energy (DOE) and Idaho National Laboratory which have brought tremendous expertise to bear in securing operational technologies to date.” – Jake Sullivan, National Security Advisor.   Read more: https://lnkd.in/gseVPKbJ   Energy Supply Chain Report: https://lnkd.in/gArGgis3 #Cybersecurity #WhiteHouse #CriticalInfrastructure #NationalLabs #Tech

Strengthening the energy supply chain is a global effort. Energy systems around the world face continuous cyber attacks and are vulnerable to disruption. Learn how to defend against identity based attacks 👉 https://lnkd.in/eHemcvCC Read the full White House briefing below. https://lnkd.in/emt7-BY5 #infosec #cyberattacks #passwordless

I'm starting to wonder what is in the water over there at U.S. Department of Energy (DOE) supporting international guidelines over the US cybersecurity guidelines, goals and objectives expressed in NSM-22 from the Office of the National Cyber Director, The White House Siloed approaches to cybersecurity within a US Critical Infrastructure Sector, such as the proposal from Jake Sullivan at ONCD will not serve to harmonize and pursue consistent baseline cybersecurity practices (CPG) across all inter-dependent Critical Infrastructure operations, and inline with US Government initiatives to acquire and use only "Secure by Design" software products that implement CISA and NIST Guidelines, following EO 14028, OMB M-22-18, OMB M-23-16, in accordance with NSM-22 directions. These type of announcements from ONCD and DOE are not helping to harmonize cybersecurity practices across critical infrastructure and secure the software supply chain following CISA "Secure by Design" prudent practices:

The G7 will work to establish a collective cybersecurity framework for operational technologies for both manufacturers and operators. “This is a global issue and at the G7 Leaders’ Summit in Apulia, President Biden and G7 leaders committed to taking critical action to strengthen the cybersecurity of the global supply chain of key technologies used to manage and operate electricity, oil, and natural gas systems across the world” #supplychain #ot #cybersecurity #g7 #criticalinfrastructure

Recognizing that energy systems around the world are facing continous cyber attack and vulnerable to disruption, an endorsement from the G7 summit and contribution from the US Department of Energy' Supply Chain Cybersecurity Principles has been announced. This guidance, tailored toward suppliers and end users, defines their roles and responsibilities in this model and is based on foundational industry standards, including ISA/IEC 62443, ISO 27000 series, and NIST. #lifeison #iec62443 #otcybersecurity https://lnkd.in/ga-Jd_CD

It appears the Office of the National Cyber Director, The White House needs to do internal "harmonization work" to address recommendations, coming from ONCD for a siloed approach to cybersecurity within the energy industry. https://lnkd.in/evac78Ev This is in spite of defined national goals to harmonize cybersecurity across critical infrastructure using baseline performance goals based on NIST standards and CISA Guidelines, not to mention NSM-22 stated goals. I'm somewhat confused by this ONCD announcement proposing that the energy industry follow international standards, that are 180 degrees out of phase with NSM-22 goals, harmonization and "Secure by Design" guidelines that many other government agencies have committed to pursue. Director Coker has some harmonization matters to address, internally at ONCD, to stop the spread of siloed cybersecurity practices that deviate from the harmonization goals of NSM-22, and "Secure by Design" pursuits of other Government Agencies, for no good reason. https://lnkd.in/emj86zzS

💡 Here you can find the new 10 best practices the #DepartmentofEnergy has introduced for securing clean energy cyber supply chains: https://lnkd.in/gJqbxDfG

How do we ensure energy security in digitalised power grids? 💡 Find out in our webinar on “A harmonised cybersecurity baseline for solar PV” on 📅 11 June, 🕑10 am Join our free webinar to learn more about: ➡️ The importance of digitalisation for the energy sector  ➡️ The role of cyberattacks and their effects on power grid stability  ➡️ The implementation of harmonised cybersecurity requirements Register here 👉https://lnkd.in/dxaCMMKW 

Big thanks to Katherine Hutton, Sam Taylor, Johnny Awad and Sagar Dayabhai (Pr.Eng) for their contribution to the Cyber Senate 10th annual Control Systems Cybersecurity UK EU conference this week. www.cybersenate.com The "Renewables" discussion on this event was very insightful. Managing turbines and offshore windfarms is not something to be taken lightly, nor is their security posture. "As the security regulations on the energy industry increase, how can we drive suppliers to comply with these requirements to maximize the security posture of the grid and support the advanced energy transition?"

Critical to protecting the energy grid is defending it from cyber threats. FERC issued Order 893 to directly address the risk of power unreliability due to cybersecurity threats, which are becoming more widespread by the day. Read more in our EIU: https://lnkd.in/eau5eAER