THE GATES ARE OPEN
OPERATIONAL TECHNOLOGY AND CONTROL SYSTEM SECURITY FOR FEDERAL FACILITIES
Proceedings of a Federal Facilities Council Workshop
James Myska and Joe Alper, Rapporteurs
Federal Facilities Council
National Academies Press
Washington, DC
This is not a publication of the National Academies of Sciences, Engineering, and Medicine. The views expressed in this publication are solely those of the author and do not necessarily reflect the views of the National Academies of Sciences, Engineering, and Medicine.
The workshop documented herein was organized by the Federal Facilities Council. Because members of the Federal Facilities Council are not appointed by the National Academies of Sciences, Engineering, and Medicine, this document is considered a product of the FFC rather than of the National Academies.
This workshop was supported by the Federal Facilities Council.
This Proceedings of a Federal Facilities Council Workshop was prepared by James Myska and Joe Alper as a factual summary of what occurred at the workshop. The statements made are those of the individual workshop participants and do not necessarily represent the views of all participants, the National Academies, or the Federal Facilities Council.
This publication is available from the National Academies Press, 500 Fifth Street, NW, Keck 360, Washington, DC 20001; (800) 624-6242 or (202) 334-3313; http://www.nap.edu.
Copyright 2024 by the National Academy of Sciences. National Academies of Sciences, Engineering, and Medicine and National Academies Press and the graphical logos for each are all trademarks of the National Academy of Sciences. All rights reserved.
Printed in the United States of America.
Suggested citation: Federal Facilities Council. 2024. The Gates Are Open: Operational Technology and Control System Security for Federal Facilities: Proceedings of a Federal Facilities Council Workshop. Washington, DC: National Academies Press. https://doi.org/10.17226/28148.
Contents
2 THE THREAT ENVIRONMENT AND CURRENT AGENCY SNAPSHOT
Threat Mitigation for Operational Technology and Control Systems
Facility-Related Control System Cybersecurity Overview
Cybersecurity and Health Care Engineering
3 STANDARDS, POLICY, AND GUIDANCE
National Institute of Standards and Technology Industrial Control System Standards
Risk Management Framework for Control System Design and Construction
4 INDUSTRY AND OPERATIONAL TECHNOLOGY/CONTROL SYSTEM SECURITY
An Industry Perspective on Operation Technology Cybersecurity
Technology Convergence, Silos, and Inventory
Guarding Against Operation Technology Supply Chain–Based Attacks
This page intentionally left blank.
