2020 ICS Advisory Report

This document was performed as a summary piece highlighting the last two years of ICS advisories in an in-depth way.  All reasonable efforts were made to analyze the data and create an informative piece such that any consumers can apply their own interpretations or actions.  No warranties or guarantees are provided.

Download the 2020 ICS Advisory Report for a robust vulnerability review for 2019/2020. Key learnings include:

• Most vulnerabilities are due to poor software development practices – not epic hacks
• There are more vulnerabilities than are acknowledged – the supply chain is just the tip of the iceberg
• Remediation of most vulnerabilities necessitates compensating controls, but this is often unclear
• Asset owners need help tracking risks and prioritizing actions as advisories increase
• Widen your risk and vulnerability management programs to include embedded systems