CISA launches programme to find internet-exposed industrial devices with manufacturers

What happened. The US Cybersecurity and Infrastructure Security Agency (CISA) launched an Installed Base Program with original equipment manufacturers (OEMs). It aims to identify owners of vulnerable, internet-exposed operational technology assets and share mitigation guidance. CISA may use subpoena authority where ownership cannot be established.

Who is affected. Owners and operators of critical infrastructure in the United States who run internet-exposed OT assets from participating equipment makers.

What to do. Check whether any of your OT devices are reachable from the internet and remove or restrict that exposure before you are contacted.

Why it matters to your site. Expect agency or manufacturer contact about exposed plant devices; use it to make the case for an inventory of internet-facing OT assets.

When to act. For awareness: Programme news only; check whether your OT devices are reachable from the internet.