AM-17-50 ICS Cybersecurity: Protecting the Industrial Endpoints that Matter Most

Description:

Endpoint detection and response (EDR) is one of the vogue technologies in industrial control system (ICS) cybersecurity today. Before EDR adoption became popular, industrial process and power generation companies focused primarily on process control network (PCN) perimeter defenses, such as firewalls, to keep the bad guys out. Cybersecurity professionals understand that perimeter defenses have limitations – particularly when you consider the insider threat – but they are an integral component of a defense in depth strategy. If a firewall is overcome, then additional layers of protection, such as EDR, must exist to protect critical systems.