NIST 800-82 Rev 3

NIST 800-82 Rev 3 now released

We had recently posted about the NIST 800-82 Special Publication Revision 2 being updated and the draft version being published. Now this draft has been formally approved and hence now we have a full version available for implementation by stakeholders such as Asset Owners, Engineering Design Consultants, Contractors, Automation vendors, OT Cybersecurity professionals and any other persons or organizations who need to be aware of OT Cybersecurity.   What …

Read more

OT Cybersecurity Training Abhisam India Aug 2023

OT Cybersecurity Training held in Mumbai

Update: The next OT Cybersecurity and IEC 62443 training workshop will be held in Mumbai on 2nd and 3rd May 2024. More details here. Abhisam’s India office successfully conducted the Abhisam “Understanding OT Cybersecurity and IEC 62443 training workshop” at Hotel Ira by Orchid, Andheri, Mumbai on 2nd Aug 2023. This unique, in-person Instructor led OT Cybersecurity training workshop was led by Mandar Phadke from Abhisam. Who participated in …

Read more

Building Automation System

NIST 800-82 Rev 3 draft released

Update: The Full version of NIST 800-82 Rev 3 has been released. The National Institute of Standards and Technology (NIST) that is a part of the US Department of Commerce had invited public comments before release of the Revision 3 of the NIST 800-82  Guide to ICS Security, we had a blog post that talked about this a few months ago here. This Initial public draft has now been …

Read more

log4j

Log4j vulnerability and ICS security

As you may already be aware, a new critical remote code execution vulnerability (CVE-2021-44228) affecting Apache Log4j software library versions 2.0-beta9 to 2.14.1 has been discovered. What is the Log4j vulnerability? Log4j is used in many websites,  consumer and enterprise services and  applications—as well as in operational technology products, which includes even Industrial Control Systems such as DCS, SIS, PLC, SCADA, Process Historians and similar hosts and controllers. For …

Read more

Cyber security – Oil and Gas industries

This paper  related to cyber security oil and gas industries, is available as a part of the Abhisam Industrial Cybersecurity report, which can be downloaded now. Author: H Sreedhar. Recent History of Automation in Oil & Gas   The Oil and Gas industry (O & G for short) has been a pioneer in embracing digital technology. It was one of the first industrial sectors to transition to Distributed Control …

Read more