GAO Reports – Week of 3-2-24 – CISA and OT Cybersecurity

This week the Government Accountability Office (GAO) published a report on “Cybersecurity: Improvements Needed in Addressing Risks to Operational Technology”. This report outlines actions taken by CISA to support critical infrastructure organizations and sector risk management agencies in securing operational technology.

The 70-page report concludes by making four recommendations for CISA:

• Measure customer service for its OT products and services,

• Perform effective workforce planning for OT staff,

• Issue guidance to the sector risk management agencies on how to update their plans for coordinating on critical infrastructure issues, and

• Develop a policy on agreements with sector risk management agencies with respect to collaboration.