Cyber experts call on CISA to create mandatory federal OT rules
OT security experts urged CISA to issue a binding directive setting baseline rules for federal operational technology.
The Operational Technology Cybersecurity Coalition published a white paper asking CISA for a binding operational directive covering federal civilian operational technology. It cites recent cyberattacks on hundreds of water systems in at least 12 U.S. states, where devices were internet-exposed, used default or no passwords, and lacked segmentation. A GAO review found only 7 of 22 civilian agencies had fully inventoried networked OT and IoT by the September 2024 deadline, across more than 8,000 federal buildings.
58