Catalog of Control Systems Security: Recommendations for Standards Developers

2.10.9 Non-Local (Remote) Maintenance ................................................................... 77
2.10.10 Timely Maintenance ......................................................................................... 78
2.11 Security Awareness and Training ..................................................................................... 78
2.11.1 Security Awareness and Training Policy and Procedures ................................ 79
2.11.2 Security Awareness .......................................................................................... 79
2.11.3 Security Training .............................................................................................. 80
2.11.4 Security Training Records ................................................................................ 81
2.11.5 Contact with Security Groups and Associations .............................................. 81
2.11.6 Security Responsibility Testing ........................................................................ 81
2.12 Incident Response ............................................................................................................. 82
2.12.1 Incident Response Policy and Procedures ........................................................ 82
2.12.2 Continuity of Operations Plan .......................................................................... 83
2.12.3 Continuity of Operations Roles and Responsibilities ....................................... 83
2.12.4 Incident Response Training .............................................................................. 84
2.12.5 Continuity of Operations Plan Testing ............................................................. 84
2.12.6 Continuity of Operations Plan Update .............................................................. 85
2.12.7 Incident Handling ............................................................................................. 85
2.12.8 Incident Monitoring .......................................................................................... 86
2.12.9 Incident Reporting ............................................................................................ 86
2.12.10 Incident Response Assistance ........................................................................... 87
2.12.11 Incident Response Plan ..................................................................................... 88
2.12.12 Corrective Action ............................................................................................. 89
2.12.13 Alternate Storage Sites ..................................................................................... 89
2.12.14 Alternate Command/Control Methods ............................................................. 90
2.12.15 Alternate Control Center .................................................................................. 91
2.12.16 Control System Backup .................................................................................... 91
2.12.17 Control System Recovery and Reconstitution .................................................. 92
2.12.18 Fail-Safe Response ........................................................................................... 93
2.13 Media Protection ............................................................................................................... 93
2.13.1 Media Protection Policy and Procedures .......................................................... 93
2.13.2 Media Access .................................................................................................... 94
2.13.3 Media Classification ......................................................................................... 95
2.13.4 Media Marking ................................................................................................. 95
2.13.5 Media Storage ................................................................................................... 96
2.13.6 Media Transport ............................................................................................... 97
2.13.7 Media Sanitization and Disposal ...................................................................... 98
2.14 System and Information Integrity ..................................................................................... 98
2.14.1 System and Information Integrity Policy and Procedures ................................ 99
2.14.2 Flaw Remediation ............................................................................................. 99
2.14.3 Malicious Code Protection ............................................................................. 100
2.14.4 System Monitoring Tools and Techniques ..................................................... 101
2.14.5 Security Alerts and Advisories and Directives ............................................... 103
2.14.6 Security Functionality Verification ................................................................ 104
2.14.7 Software and Information Integrity ................................................................ 104
2.14.8 Spam Protection .............................................................................................. 105
2.14.9 Information Input Restrictions ........................................................................ 106
2.14.10 Information Input Validation .......................................................................... 106
2.14.11 Error Handling ................................................................................................ 107
2.14.12 Information Output Handling and Retention .................................................. 107
2.14.13 Predictable Failure Prevention ........................................................................ 108
x