SUCCESSFUL CYBER-RISK MANAGEMENT OF OPERATIONAL TECHNOLOGY AND INDUSTRIAL CONTROL SYSTEMS – TECHNICAL AND POLICY

This paper examines the challenges and best practices in responding to this convergence and discusses some of the technical measures that can be used to improve the security of OT devices. [...] The paper also includes comments on the OT challenges facing the Asia-Pacific region, and suggests how Singapore, in private-public partnership with industry groups, can improve the capacity for OT security in the Asia-Pacific region. [...] The Convergence of IT and OT Risk Few organisations currently manage OT and IT with the same level of staffing and resources. [...] Projects developed so far include software to take inventory of OT assets and identify unauthorised OT devices for the water sector; a SCADA packet inspection firewall and secure wireless communications for the land transport sector; and prototypes to detect anomalous activities of OT systems for the energy sector. [...] For example, ASEAN member states can begin to take guidance from the ASEAN Ministerial Conference on Cybersecurity (AMCC), which agreed in 201817 to subscribe in-principle to the 11 voluntary, non-binding norms recommended in the 2015 Report of the United Nations Group of Governmental Experts on Developments in the Field of Information and Telecommunications in the Context of International Securit.