Misplaced ICS-CERT Priorities

If Not Asked, ICS-CERT Can't Help

Share Print Related RSS

[Editor's note: The following is a response to Joe Weiss' "Unfettered" blog post on "The Case of ICS-CERT Misplaced Priorities" (http://tinyurl.com/6s69dsg).] 

ICS-CERT is supposed to respond to requests for assistance. If not asked, they can't help. Even more of a problem is that, if they are asked to help, they may not be allowed to publicly disclose the problem/response. There are no legal impediments to sharing sanitized (no names/locations) reports about building HVAC systems. Power plants are a completely different story. If there was an ICS-CERT response to the December power plant incident, it would have been nice if they could have appropriately sanitized a report on what caused the problem. Could this have been one of the 86 control system "attacks" reported to Congress by DHS?

Patrick Coyle
Chemical Facility Security News

Share Print Reprints Permissions

What are your comments?

You cannot post comments until you have logged in. Login Here.

Comments

No one has commented on this page yet.

RSS feed for comments on this page | RSS feed for all comments