OT Coalition Urges CISA to Mandate Federal OT Security
An OT security coalition urged CISA to mandate minimum operational technology controls for US federal civilian agencies.
The Operational Technology Cybersecurity Coalition published a report on October 6 urging CISA to issue a binding operational directive for operational technology used by federal civilian agencies. Agencies rely on OT in more than 8,000 GSA-managed facilities for HVAC, power, access control, water, and building automation. A September 30 GAO report found that only seven of 22 civilian agencies had fully met OMB requirements to inventory networked OT and IoT devices, which were due by September 2024. The proposed baseline covers asset inventory, segmentation, remote access, configuration management, incident preparedness, and verified recovery, while commentators said it does not require patching or firmware updates.