Building Automation System

NIST 800-82 Rev 3 draft released

The National Institute of Standards and Technology (NIST) that is a part of the US Department of Commerce had invited public comments before release of the Revision 3 of the NIST 800-82  Guide to ICS Security, we had a blog post that talked about this a few months ago here. This Initial public draft has now been released for review by stakeholders and is available to read and review. …

Read more

Understanding IEC 62443-2-4

What is IEC 62443-2-4? Understand it easily

Abhisam is pleased to announce that a new module on understanding IEC 62443-2-4 is being released soon. This will be part of the Abhisam Industrial Cybersecurity training course. All current learners will get access to this new course module. What is IEC 62443-2-4? As you probably know, the IEC 62443 series of standards is developed jointly by ISA (International Society of Automation) and IEC (International Electrotechnical Commission), to provide …

Read more


Log4j vulnerability and ICS security

As you may already be aware, a new critical remote code execution vulnerability (CVE-2021-44228) affecting Apache Log4j software library versions 2.0-beta9 to 2.14.1 has been discovered. What is the Log4j vulnerability? Log4j is used in many websites,  consumer and enterprise services and  applications—as well as in operational technology products, which includes even Industrial Control Systems such as DCS, SIS, PLC, SCADA, Process Historians and similar hosts and controllers. For …

Read more

Industrial Cyber security plain chart

Industrial cyber security Lifecycle- top 10 controls to secure your IACS

The Abhisam Industrial Cyber Security Lifecycle shows the top 10 controls needed to achieve robust cyber security for your Industrial Automation, Control and Safety System (IACS). IACS is a broad term for control and automation systems such as DCS (Distributed Control Systems), PLC (Programmable Logic Controllers), SCADA (Supervisory Control and Data Acquisition Systems), SIS (Safety Instrumented Systems), HIPPS (High Integrity Pressure Protection Systems), BMS (Burner Management Systems) and others. …

Read more

SCADA cyber security

Scada Cyber Security- Safeguarding Critical Industrial Systems

What is SCADA cyber security? SCADA cyber security refers to protecting Supervisory Control and Data Acquisition systems from cyber attacks that can not only damage the system itself, but also lead to consequential damages to plant and equipment, as well as cause hardship to people due to contaminated water supplies, or failure of the electrical supply to homes, industries and businesses, or shortages of critical items such as gasoline …

Read more

Industrial Control Systems Cyber Security

Industrial Control Systems Cyber Security Advanced Training

Industrial Control Systems Cyber Security Training   Looking for Industrial Control Systems Cyber Security Advanced Training? Then this Abhisam course is the one that you’re looking for. Composed on several modules that include everything from Basic Concepts of Industrial Control Systems as well as Basic Concepts about cyber security, this Abhisam training course has them all. The Advanced Module of this course includes current topics such as the MITRE …

Read more

Supply chain attacks can use counterfeit switches

Supply Chain Attacks in 2021- ICS Security implications

Supply Chain attacks are something to watch out for In the recently published Abhisam Industrial Cybersecurity Report, we had mentioned supply chain attacks, as something to watch out for in 2021. We never imagined that we would be so right. As the year 2021 progresses, we  are witnessing increasing incidents of supply chain cyberattacks. These supply chain attacks are pretty broad in scope and are not just related to …

Read more


NIST Guide to ICS Security- Call for comments

Update: NIST has released the draft now. Please see here for news on the latest NIST 800 Rev 3 Draft. The National Institute of Standards and Technology (NIST) that is a part of the US Department of Commerce has invited public comments to update the existing NIST Guide to Industrial Control Systems (ICS) Security, SP 800-82 Rev 2 to SP 800-82 (Rev 3). The deadline for comments is May …

Read more

Cyber security – Oil and Gas industries

This paper  related to cyber security oil and gas industries, is available as a part of the Abhisam Industrial Cybersecurity report, which can be downloaded now. Author: H Sreedhar. Recent History of Automation in Oil & Gas   The Oil and Gas industry (O & G for short) has been a pioneer in embracing digital technology. It was one of the first industrial sectors to transition to Distributed Control …

Read more

Industrial Cybersecurity Trends | What to expect from ICS security in 2021 and beyond?

Abhisam recently published a report on the State of Industrial Cybersecurity in the year 2020 and the road ahead in 2021. The report was compiled by contributions from several different experts from various industry segments, who are individually having at least 25 years of experience in their own domains as well as having  deep knowledge about Industrial Cybersecurity. To understand the basics, please see this basic Industrial Cybersecurity guide …

Read more