tag:blogger.com,1999:blog-9122514974659083342.post3585192799621015602..comments2024-02-02T22:30:20.736-05:00Comments on Chemical Facility Security News: Reader Comment – NIST ICS Security GuidePJCoylehttp://www.blogger.com/profile/03390039682578324978noreply@blogger.comBlogger2125tag:blogger.com,1999:blog-9122514974659083342.post-53297761090163872992011-06-16T08:19:19.136-04:002011-06-16T08:19:19.136-04:00No, I understood the point you were making. I just...No, I understood the point you were making. I just thought that it was a good launch point about the changing focus on cyber security on the chemical security front.<br />Thanks for the follow-up comments, too.PJCoylehttps://www.blogger.com/profile/03390039682578324978noreply@blogger.comtag:blogger.com,1999:blog-9122514974659083342.post-60835791144229189852011-06-16T03:37:41.781-04:002011-06-16T03:37:41.781-04:00Hi PJ,
Just to make this clear, my intention was ...Hi PJ,<br /><br />Just to make this clear, my intention was not to point out a lack of understanding on your end. I monitor your blog, because I feel you have something valuable to add. If you still feel you're new to the ICS security community: welcome :-).<br /><br />I totally agree with your assessment, I very much welcome that this document is finally officially approved by NIST. This does have an impact on its weight - a draft that hasn't been touched nor released for three years feels a bit awkward to refer to. And if this raises the attention to the document for those people who joined our community in the past two or three years, that is only good.<br /><br />While I do see many vendors (at least the bigger ones that I have contacts with, including my employer ABB) are spending significant efforts and are making good progress, I do agree that without customer pull, this is very hard if at all possible to pull off. If you want to justify efforts in a corporate environment, nothing beats customer demand. And we do see quite a heterogeneous mix of customers' security demands across the globe and across the different domains we're supplying to. North America and the Energy, Oil&Gas and Chemical sectors are at the high end of that spectrum, I'd say.<br /><br />Cheers,<br /><br /> RagnarRagnar Schierholznoreply@blogger.com