SteelCloud LLC, a leading STIG and CIS compliance automation software developer, announced today its ConfigOS technology has been licensed to a major U.S. energy company to secure Operational Technology (OT) assets.
SteelCloud’s software will be used to harden OT endpoints using the Center for Internet Security (CIS) industry-standard for system-level controls. The initial implementation will be deployed to support the NIST security framework and will include thousands of process control and SCADA assets. The ConfigOS agent-less architecture provides unique benefits to OT operators because it performs its cyber work without the need to load software on OT assets.
According to Gartner, “attacks on organizations in critical infrastructure sectors have increased dramatically, from less than 10 in 2013 to almost 400 in 2020 — a 3,900% change.” Gartner also predicts that by 2025, “30% of critical infrastructure organizations will experience a security breach that will result in the halting of an operations- or mission-critical cyber-physical system.”
“With the convergence of IT and OT networks, securing those assets from cyber-attack is more important today than ever,” said Curtis Dukes, CIS Executive Vice President and General Manager, Security Best Practices. “SteelCloud’s application uses CIS consensus-based Benchmarks to significantly reduce common threats such as malware, insufficient authorization, and remote intrusion.”
“With the most recent attacks and the guidance provided by CISA and NIST, critical infrastructure organizations are beginning to increase their focus on improving OT security, said Brian Hajost, SteelCloud Chief Operating Officer. “Companies which have standardized on the high-level NIST framework are looking to implement the proper system-level controls necessary to effect the proper security hardening. The industry-standard CIS Benchmarks define the answer, and our ConfigOS software was chosen to automate these security controls in the most efficient and effective manner possible.”
For more such updates and perspectives around Digital Innovation, IoT, Data Infrastructure, AI & Cybersecurity, go to AI-Techpark.com.
