It can be a struggle to find real data regarding what is going on in the ICS threat landscape. But if you know where to look, the data is out there. A recent article highlights 6 great resources:
- SANS ICS Security Survey – Quantitative Data and Good Recommendations: “Where Are We Now?: The SANS 2016 ICS Survey” and “The State of Security in Control Systems Today” and
- ICS-CERT – U.S. Focused Data for Critical Infrastructure Industries: ICS-CERT
- RISI – Historical Industrial Security Data: RISI
- ARC Advisory Group: A Maturity Model for Industrial Cybersecurity Planning
- Gartner Group: Market Guide for Operational Technology Security
For more for background on these ICS threat data sources, and the full article see: Where-to-Find-Hard-to-Get-Industrial-Security-Data