International Cybersecurity Agencies Release New Operational Technology Protection Framework

International Collaboration Produces OT Security Framework

Multiple cybersecurity agencies from the United States and United Kingdom have jointly released comprehensive guidance for securing operational technology systems, according to reports from participating organizations. The Cybersecurity and Infrastructure Security Agency (CISA) collaborated with the Federal Bureau of Investigation and the United Kingdom’s National Cyber Security Centre (NCSC) to develop “Creating and Maintaining a Definitive View of Your Operational Technology (OT) Architecture.”

Building Upon Previous Asset Management Guidance

The new guidance builds upon recent “Foundations for OT Cybersecurity: Asset Inventory Guidance for Owners and Operators,” sources indicate. Organizations can leverage various data sources, including asset inventories and manufacturer-provided resources like software bill of materials, to establish and maintain accurate, up-to-date views of their OT systems, the report states.

Comprehensive Risk Assessment Capabilities

Analysts suggest that maintaining a definitive OT record enables organizations to conduct more comprehensive risk assessments and prioritize critical systems. This approach allows for better implementation of appropriate security controls across industrial environments, according to the guidance available through the official CISA resource page.

Addressing Third-Party and Architectural Risks

The joint guidance specifically addresses managing third-party risks, securing OT information, and designing effective architectural controls, according to reports. Key recommendations include:

Collaborating across organizational teams to foster coordination between OT and IT departments
Aligning security practices with international standards like IEC 62443 and ISO/IEC 27001
Implementing comprehensive computer security measures across operational environments

International Cybersecurity Cooperation

This collaboration between the United Kingdom and United States represents ongoing international efforts to strengthen critical infrastructure protection. The guidance comes as industrial organizations worldwide face increasing cybersecurity threats to their operational technology systems.

Industry Context and Implementation

While this guidance focuses specifically on OT security, organizations are simultaneously navigating other technological developments across the industrial sector. Recent industry announcements include Microsoft’s Windows 10 feature updates, Blackhawk Industrial’s leadership appointments, Apple’s M5 chip developments, and Blackhawk’s regional expansion plans.

Strengthening Organizational Security Posture

Organizations are encouraged to use this guidance to strengthen their OT security posture and reduce risks, according to the joint announcement. The framework provides practical approaches for maintaining accurate system architecture documentation and implementing appropriate security controls across industrial operations.

This article aggregates information from publicly available sources. All trademarks and copyrights belong to their respective owners.

Fashion retailer Mango has confirmed a data breach affecting customer contact information through a compromised third-party marketing service. The company reports that no financial data or login credentials were accessed during the security incident, with core systems remaining operational.

Mango Confirms Security Incident Affecting Customer Data

Fashion retailer Mango has confirmed a data breach following a cyber attack targeting a third-party marketing service, according to reports from the company. Sources indicate the breach compromised limited personal contact information including names, countries, postal codes, email addresses, and phone numbers of an unspecified number of customers.