CS-17-04 Building and Sustaining an OT Security Services Capability from Within

Description:

Providing sufficient cyber security risk mitigation in diverse OT environments within an enterprise is a daunting proposition. The expense of pursuing a common strategy to address security weaknesses in the commodity, networked OT infrastructure is significant, with the primary driver being the complexity of maintaining supportability and stability given many ICS vendors providing the software running on that OT infrastructure. Flint Hills Resources collaborated with an internal IT technical support group experienced in OT environments to create and operate an OT focused services stack to deliver patching, antivirus, device health monitoring and advanced security analytics with a highly disciplined and controlled approach. Partnering with the technology providers, internal OT experienced resources, and executive level stakeholders from the inception of the initiative was key to achieved progress and sustainability.