OT coalition urges CISA to issue binding directive on protecting federal OT systems

The Operational Technology Cybersecurity Coalition on Tuesday called on CISA to issue a binding operational directive (BOD) for OT security across federal agencies. The directive should designate an OT cybersecurity officer at each agency, build on existing federal guidance and set minimum security practices. The push follows this summer's attacks on water utilities and a GAO report finding most agencies haven't met 2023 OMB requirements.

• OT Cybersecurity Coalition urged CISA to issue a BOD focused solely on OT security
• Directive should name an officer responsible for OT cybersecurity at each agency
• GAO: most federal civilian agencies haven't met 2023 OMB IoT and OT requirements
• GSA owns or leases 8,000 properties with OT systems