Review - New CISA Web Site – ICS Security

As part of the revision of the CISA web site that I briefly discussed yesterday, CISA has revamped, again, the Industrial Control System Security portion of their site. Gone are all mentions of the old US-CERT and ICS-CERT, even from the URL’s. This later change has been in the works for quite some time, with multiple changes in the past leading to yesterday’s apparent final elimination.

The new landing page retains the ‘four core priorities’ and three Goals that premiered on the previous revision of page. Following those entries, the page provides links for:

Report a Vulnerability,

ICS Advisories,

ICS Training, and

ICSJWG

The page then provides listings for ‘CISA’s ICS Offerings’ with category headings of:

• Assessment Services,

• Threat Hunting and Incident Response,

• Partnerships and Engagement,

• Technical Products and Services,

• Information Exchange,

• Vulnerability Coordination and Disclosure

Similar headings were provided on the previous landing page. Interestingly under the heading ‘Partnership and Engagement’ the page lists ‘Follow CISA ICS on Twitter’. Since CISA consolidated their TWITTER accounts this takes you to https://twitter.com/CISACyber, not any dedicated ICS account.

For more on the information available on the new ICS Security web site, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/new-cisa-web-site - subscription required.