View Resource
Zero Trust Guidance for Critical Infrastructure
Release Date: 10/28/2024
Organization: CSA
Content Type: Guidance
Solution Provider Neutrality: Neutral
In most nations, the health of public services relies on secure and resilient Critical Infrastructure. We call these infrastructures "critical" because their destruction would have a drastic impact on the welfare of a nation. This publication promotes the implementation of Zero Trust principles for securing Critical Infrastructure. As an extensible and holistic enterprise security strategy, Zero Trust is the key for ensuring Critical Infrastructure protection.
More specifically, this document delves into the nuanced application of Zero Trust for Operational Technology and Industrial Control Systems security strategies. First, it clarifies the foundational concepts of Zero Trust. Then, it provides a tailored roadmap for implementing these principles into Operational Technology and Industrial Control Systems settings. This roadmap employs a systematic five-step approach based on the NSTAC Report to the President on Zero Trust.
By leveraging this guidance, organizations will find a clear forward-looking path for continuous improvement of their security postures.
Key Takeaways:
- Unique security risks and threat vectors for Critical Infrastructure
- How Operational Technology converges with digital transformation
- Differences in objectives and architecture of Operational Technology vs traditional Information Technology
- Review of the five-step implementation process for Zero Trust
- How to apply the five-step process to Industrial Controls Systems and Operational Technology security
- How vendors are building Zero Trust capabilities into new technology