Misplaced ICS-CERT Priorities

If Not Asked, ICS-CERT Can't Help

[Editor's note: The following is a response to Joe Weiss' "Unfettered" blog post on "The Case of ICS-CERT Misplaced Priorities" (http://tinyurl.com/6s69dsg).] 

ICS-CERT is supposed to respond to requests for assistance. If not asked, they can't help. Even more of a problem is that, if they are asked to help, they may not be allowed to publicly disclose the problem/response. There are no legal impediments to sharing sanitized (no names/locations) reports about building HVAC systems. Power plants are a completely different story. If there was an ICS-CERT response to the December power plant incident, it would have been nice if they could have appropriately sanitized a report on what caused the problem. Could this have been one of the 86 control system "attacks" reported to Congress by DHS?

Patrick Coyle
Chemical Facility Security News

Join the discussion

We welcome your thoughtful comments. Please comply with our Community rules.
All comments will display your user name.

Want to participate in the discussion?

Register for free

Log in for complete access.

Comments

No one has commented on this page yet.

RSS feed for comments on this page | RSS feed for all comments