CYBER DEFENCE INDIA 2022�WEBINAR PROGRAMME

​

​

CRITICAL NATIONAL INFRASTRUCTURE PROTECTION

​

Maj Gen PK Mallick, VSM (Retd)

​

CENJOWS

10 June 2022

https://www.strategicstudyindia.com/

USA EXAMPLE

Sector Specific Agency for Each Critical Infrastructure in the USA

Overall Cybersecurity �Organisation of USA

NCCIPC – SIX SECTORS

Questions Regarding Cyber Security Regulators

• How are the regulators appointed.
• How are their competencies assessed.
• Do regulators have a proficient process? Do they possess the technical know-how.
• Do they have the practical experience to relate to challenges faced by the nuclear sector.
• What is the process of appointment and evaluation of regulators.
• Are the regulators consulting vertically and horizontally with other regulators of critical information infrastructure? Who organizes these interactions.
• What control does National Cyber Security Coordinator has on the regulators.

List of recommendations to secure ICS/SCADA systems

• Use virtual patching to help manage updates and patches
• Apply network segmentation
• Use adequate security measures between the ICS network and corporate network
• Properly manage authorization and user accounts
• Use endpoint protection on engineering workstations connected to SCADA for device programming and control adjustments
• Maintain strict policies for devices that are allowed to connect to SCADA networks
• Restrict the roles of transitory SCADA nodes to a single purpose
• Prevent the use of unknown and untrusted USB devices

THANK YOU