Chemical Sector Training and Resources Page Updated

The DHS Chemical Sector Specific Agency (Chemical SSA) updated their Chemical Sector Training and Resources web page on Friday. They added a new section that deals with information concerning the security of industrial control systems.

The new ‘Industrial Control Systems (ICS) Security’ section at the bottom of the page provides a link to a new document produced by the Chemical Sector Coordinating Council; “Securing Industrial Control Systems in the Chemical Sector: A Case for Action”. This document is part of an awareness campaign being conducted to make chemical manufacturing facilities aware of the ongoing implementation of the ten year ICS security program outlined in the Roadmap to Secure Control Systems in the Chemical Sector, a document available upon request to the Chemical SSA (ChemicalSector@DHS.gov).

The new section on this web page also briefly describes a DVD that is available from the Chemical SSA that provides additional resources available to help facilities to increase the security of their ICS. The web site indicates that the following information is included in the DVD:

• ICS Security Training Resource – A guide of available training designed for professionals who work in areas relevant to the process control and automation industries.

• Standards and Guidelines - A guide designed to facilitate research on existing standards in the area of control systems security.

• Incident Response and Reporting - A document that illustrates the importance of a chemical company reporting a cyber incident to ICS-CERT, and how this can positively impact the Chemical Sector.

• ICS Procurement Language - A document that provides example language to incorporate into procurement specifications.

• Cybersecurity Tabletop Exercise – This resource is scalable and includes all materials and templates needed to conduct a tabletop exercise with minimal planning.

The Case for Action document also notes that the DVD contains a copy of the Cyber Security Evaluation Tool that I have previously described in this blog.

It would seem to me that any cyber security officer responsible for industrial control system security ought to email the Chemical SSA and request a copy of this DVD, It would be an invaluable resource. That and downloading the Case for Action document are two simple steps that could lead to increased ICS security awareness.