After the Congressional testimony in October, the panelists were provided with questions from committee members. Joe Weiss shares two along with his answers in his latest Unfettered entry.
Congressman McCaul asks “What are the principal differences between the ISA 99 standards and the NIST best practices found in Special Publication 800-53?”
I know and admire Joe, but [...]

We have been writing, and have completed, the draft Field Device Protection Profile for PCSRF that defines the security requirements for the next generation of PLC’s, RTU’s, IED’s, etc. The full document is available to registered users at the NIST / PCSRF site.
PCSRF has really struggled with the Common Criteria and is reconsidering if it [...]

The National Institute of Standards and Technology (NIST) publishes a helpful set of security guidelines known as the 800 series. Recent publications provide guidance on biometrics, IPSec VPN’s and hardened configurations.
Work has begun on a Guide to SCADA and Industrial Control System Security in the 800 series. Some of the national labs, standards organizations such [...]