ICS-CERT Advisories Advisories provide timely information about current security issues, vulnerabilities, and exploits .
ICS-CERT Alerts An ICS-CERT Alert is intended to provide timely notification to critical infrastructure owners and operators concerning threats or activity with the potential to impact critical infrastructure computing networks.
ICS-CERT Monitor Newsletters ICS-CERT publishes the Monitor Newsletter when an adequate amount of pertinent information has been collected. We provide this newsletter as a service to personnel actively engaged in the protection of critical infrastructure assets.
Other Reports This section includes ICS-CERT Technical Information Papers (TIPs), Annual Reports (Year in Review), and other products that ICS-CERT believes are of interest to persons engaged in protecting industrial control systems.
Destructive Malware This NCCIC/ICS-CERT white paper highlights a number of the destructive malware families analyzed by ICS-CERT and gives recommendations for victims on the best way to combat each specific family. Length is 4 pages. March 2017.
WMI For Detection and Response This NCCIC/ICS-CERT white paper has been temporarily removed from the web site pending resolution of content issues. April 2017.
United States Electricity Industry Primer U.S. Department of Energy. A high-level overview of the U.S. electricity supply chain, including generation, transmission, and distribution; markets and ownership structures, including utilities and regulatory agencies; and system reliability and vulnerabilities. Length is 49 pages. August 2016.
Seven Steps to Effectively Defend Industrial Control Systems DHS/FBI/NSA. This paper presents seven strategies that can be implemented today to counter common exploitable weaknesses in “as-built” control systems. Length is 6 pages. December 2015.
Guidelines for Application Whitelisting in Industrial Control Systems DHS/NSA. This document serves as an appendix to the “Seven Steps to Defend Industrial Control Systems” document, providing additional conceptual-level guidance on implementing application whitelisting. Length is 6 pages. April 2016.
OCIA—The Future of Smart Cities: Cyber-Physical Infrastructure Risk The Department of Homeland Security’s Office of Cyber and Infrastructure Analysis (DHS/OCIA) produced this report discussing how the adoption of, and increased reliance on smart technologies might create or increase risks for Smart Cities. Length is 49 pages. August 2015.
10 Basic Cybersecurity Measures (WaterISAC) WaterISAC partnered with the U.S. Department of Homeland Security Industrial Control Systems Cyber Emergency Response Team (ICS-CERT), the FBI, and the Information Technology ISAC to develop a list of 10 basic cybersecurity recommendations to reduce exploitable weaknesses and defend against avoidable data breaches and cyber attacks. Length is 9 pages. June 2015.
Strategy for Securing Control Systems Department of Homeland Security (DHS). This DHS document develops and describes a strategy to protect United States critical infrastructure. Length is 128 pages. October 2009.
21 Steps to Improve Cyber Security of SCADA Networks Office of Energy Assurance, Office of Independent Oversight and Performance Assurance, U.S. Department of Energy. If you prefer a list of cybersecurity improvements, then read this short, 10-page document.
Cybersecurity and the Smarter Grid U.S. Department of Energy Office of Electricity Delivery and Energy Reliability report discussing cybersecurity for the power grid and how DOE and the energy sector are partnering to keep the smart grid reliable and secure. October 2014.
National SCADA Test Bed (NSTB) Program Created in 2003, the National SCADA Test Bed (NSTB) is a one-of-a-kind national resource that draws on the integrated expertise and capabilities of the Argonne, Idaho, Lawrence Berkeley, Los Alamos, Oak Ridge, Pacific Northwest, and Sandia National Laboratories to address the cybersecurity challenges of energy delivery systems.
Roadmap to Secure Control Systems in the Chemical Sector Prepared by Chemical Sector Roadmap Working Group, sponsored by the U.S. Department of Homeland Security and the Chemical Sector Coordinating Council. This Chemical Sector working group has developed five goals along with milestones to implementing a cybersecurity strategy. Length is 76 pages. September 2009.
Top 10 Vulnerabilities of Control Systems and Their Associated Mitigations, 2007 North American Electric Reliability Council Control Systems Security Working Group and U.S. Department of Energy National SCADA Test Bed Program. This short, eight-page document lists 10 top vulnerabilities found in control systems and offers a graded approach to mitigating them. December 7, 2006.
Official website of the Department of Homeland Security
