Bottom line: Islanding can be a viable option for maintaining OT security when IT systems are down, but its implementation requires careful planning and coordination.
What's happening: The US Department of Energy's (DOE) recent guidance (February 2023) emphasizes the importance of OT in the event of IT failures, while the UK's National Cyber Security Centre (NCSC) has also issued guidance (March 2023) on islanding strategies for OT systems.
What to do: Security leaders should engage with OT teams to develop a comprehensive islanding plan, including risk assessments and contingency measures, to ensure the continuity of critical infrastructure. --- TITLE: Island Hopping in the Dark: Zero-Day Exploits and OT Security SUMMARY: Recent government directives clarify the role of OT in the event of IT system failures, focusing on islanding strategies to ensure continuity of critical infrastructure.
Bottom line: Islanding can be a viable option for maintaining OT security when IT systems are down, but its implementation requires careful planning and coordination.
What's happening: The US Department of Energy's (DOE) recent guidance (February 2023) emphasizes the importance of OT in the event of IT failures, while the UK's National Cyber Security Centre (NCSC) has also issued guidance (March 2023) on islanding strategies for OT systems.
What to do: Security leaders should engage with OT teams to develop a comprehensive islanding plan, including risk assessments and contingency measures, to ensure the continuity of critical infrastructure.