tFederal Facilities Council.. James Myska and Joe Alper, Rapporteurs

Federal facilities are increasingly complex and sophisticated systems of systems, with automated systems tied together through operational technology (OT) networks monitoring and controlling lighting and environmental control systems (CS), among many others. Federal agencies have built virtual fortresses around their information technology (IT) networks, including connected CS and OT networks, yet key vulnerabilities can allow bad actors to tunnel through the embedded layers of protection, interfere with facility operation and control, and gain direct passages into IT networks, bypassing their elaborate protections. On July 9, 2024, the National Academies' Federal Facilities Council convened a workshop to discuss the security of CS and OT networks. Workshop panelists explored the current threat environment; standards, policies, and guidance to protect OT and CS from malicious actors; and approaches that industry has taken to protect its OT and CS security.

National Academies of Sciences, 2024. 41p.