CISA：2024运营技术网络安全原则指南（英文版）（14页）.PDF

1、Content Complexity MODERATEPrinciples of operational technology cyber securityThis publication was developed by the Australian Signals Directorates Australian Cyber Security Centre(ASDs ACSC)in collaboration with the U.S.Cybersecurity and Infrastructure Security Agency(CISA),National Security Agency

2、(NSA),Federal Bureau of Investigation(FBI),Multi-State Information Sharing and Analysis Center(MS-ISAC),United Kingdoms National Cyber Security Centre(NCSC-UK),Canadian Centre for Cyber Security(Cyber Centre),New Zealands National Cyber Security Centre(NCSC-NZ),Germanys Federal Office for Informatio

3、n Security(BSI Germany),the Netherlands National Cyber Security Centre(NCSC-NL),Japans National Center of Incident Readiness and Strategy for Cybersecurity(NISC)and National Police Agency(NPA),and the Republic of Koreas National Intelligence Service(NIS)and NIS National Cyber Security Center(NCSC).P

4、rinciples of operational technology cyber security3ContentsIntroduction 4Principles of operational technology cyber security 5Principle 1:Safety is paramount 5Principle 2:Knowledge of the business is crucial 6Principle 3:OT data is extremely valuable and needs to be protected 8Principle 4:Segment an

5、d segregate OT from all other networks 9Principle 5:The supply chain must be secure 11Principle 6:People are essential for OT cyber security 12IntroductionCritical infrastructure organisations provide vital services,including supplying clean water,energy,and transportation,to the public.These organi

6、sations rely on operational technology(OT)to control and manage the physical equipment and processes that provide these critical services.As such,the continuity of vital services relies on critical infrastructure organisations ensuring the cyber security and safety of their OT.Due to the extensive i