Commentary: Security Incidents Organization tries to find its way doing important work

Newly formed organization carries on task of collecting information on cyber security breach incidents.

08/04/2009


The newly formed, non-profit Security Incidents Organization (SIO) has announced it will provide public access to the Repository of Industrial Security Incidents (RISI). RISI bills itself as an industry-wide repository for collecting, investigating, analyzing, and sharing critical information regarding cyber security incidents that directly affect SCADA, manufacturing, and process control systems. With over 150 incidents, RISI is the largest known collection of industrial cyber security incidents.

Modeled after similar safety incident databases, RISI provides subscribers with reliable information that allows them to learn from others' experiences, understand the risks associated with industrial cyber-threats, and adapt their current security policies in step with changing industrial cyber-security dynamics.

RISI traces its history back to early 2001, when academic researchers developed a database called the Industrial Security Incidents Database (ISID). In 2008 several private cyber security experts, building on ISID, began collaboration on the RISI project with a goal of making the information available to the entire industrial automation community. The new SIO was established in 2009 to fulfill this goal by operating the RISI database, researching incidents, and making the results of that research publically available.

"We have always known that the ISID was a tremendous resource for asset owners," says Mark Fabro, president and chief security scientist for Lofty Perch and SIO advisory board member. "It was used to do sector analysis, threat trending, and provided foundation for setting security program budgets. It was a real agent of change for the community. Back in early 2008, Eric Byres and I, along with Mark Zanotti from Lofty Perch, started planning to bring such a database back to life. We felt that the time was right to do it, and we had the experience and the trust of the community to make it work.

"After many months of planning, as well as formal announcements at PCSF, we started to roll it out. The RISI database was founded on the same principles as ISID, and takes into consideration the wants and needs the community has shared over the last couple of years. We know how the database needs to look, what detail it needs to have, and what the best subscription model looks like.

"Make no mistake, we are still finding our way and working out some wrinkles. We think the effort will mature quickly, and we are counting on the continued support from the community of interest to help it along. We think we have been able to mitigate most if not all of the issues raised by interested parties, and are grateful for the insights we have received from various sector stakeholders."

It will be interesting to see how this plays out in the coming months and years as the organization finds direction. This is important work for the industrial community and deserves widely based support.

-Peter Welander, process industries editor, PWelander@cfemedia.com
Process & Advanced Control Monthly eNewsletter
Register here to select your choice of free eNewsletters .





No comments
The Top Plant program honors outstanding manufacturing facilities in North America. View the 2013 Top Plant.
The Product of the Year program recognizes products newly released in the manufacturing industries.
The Leaders Under 40 program features outstanding young people who are making a difference in manufacturing. View the 2013 Leaders here.
The new control room: It's got all the bells and whistles - and alarms, too; Remote maintenance; Specifying VFDs
2014 forecast issue: To serve and to manufacture - Veterans will bring skill and discipline to the plant floor if we can find a way to get them there.
2013 Top Plant: Lincoln Electric Company, Cleveland, Ohio
Case Study Database

Case Study Database

Get more exposure for your case study by uploading it to the Plant Engineering case study database, where end-users can identify relevant solutions and explore what the experts are doing to effectively implement a variety of technology and productivity related projects.

These case studies provide examples of how knowledgeable solution providers have used technology, processes and people to create effective and successful implementations in real-world situations. Case studies can be completed by filling out a simple online form where you can outline the project title, abstract, and full story in 1500 words or less; upload photos, videos and a logo.

Click here to visit the Case Study Database and upload your case study.

Bring focus to PLC programming: 5 things to avoid in putting your system together; Managing the DCS upgrade; PLM upgrade: a step-by-step approach
Balancing the bagging triangle; PID tuning improves process efficiency; Standardizing control room HMIs
Commissioning electrical systems in mission critical facilities; Anticipating the Smart Grid; Mitigating arc flash hazards in medium-voltage switchgear; Comparing generator sizing software

Annual Salary Survey

Participate in the 2013 Salary Survey

In a year when manufacturing continued to lead the economic rebound, it makes sense that plant manager bonuses rebounded. Plant Engineering’s annual Salary Survey shows both wages and bonuses rose in 2012 after a retreat the year before.

Average salary across all job titles for plant floor management rose 3.5% to $95,446, and bonus compensation jumped to $15,162, a 4.2% increase from the 2010 level and double the 2011 total, which showed a sharp drop in bonus.

2012 Salary Survey Analysis

2012 Salary Survey Results

Maintenance and reliability tips and best practices from the maintenance and reliability coaches at Allied Reliability Group.
The One Voice for Manufacturing blog reports on federal public policy issues impacting the manufacturing sector. One Voice is a joint effort by the National Tooling and Machining...
The Society for Maintenance and Reliability Professionals an organization devoted...
Join this ongoing discussion of machine guarding topics, including solutions assessments, regulatory compliance, gap analysis...
IMS Research, recently acquired by IHS Inc., is a leading independent supplier of market research and consultancy to the global electronics industry.
Maintenance is not optional in manufacturing. It’s a profit center, driving productivity and uptime while reducing overall repair costs.
The Lachance on CMMS blog is about current maintenance topics. Blogger Paul Lachance is president and chief technology officer for Smartware Group.