Michele Moss, Booz Allen Hamilton - Build Security In

More documents

Recommendations

Info

Business Perspective INCIDENT: Telvent Canada, a company that provides industrial automation technology to agencies managing the energy industry, was the target of a malicious software attack. Telvent stated someone installed the software and stole files pertaining to control software for their electric grid management. The malware used in the attack is believed to be associated with a Chinese hacker group called “Comment Group.” Comment Group has a history of spying and hacking into important Western infrastructure systems and databases. IMPACT: Files associated with the firm’s Supervisory Control and Data Acquisition (SCADA) were stolen. The firm does not believe the intruder stole any information that would enable them to gain access to a customer system. The CEO of Digital Bond believes the hackers are specifically targeting the industrial control system sector. Loss of <strong>In</strong>tellectual Property MITIGATION: As a precautionary measure the company indefinitely terminated any customer system access by Telvent. Telvent is actively working with law enforcement, security specialists, and customers to ensure the breach has been contained. Two days after the breach, Telvent partnered with a security firm named <strong>In</strong>dustrial Defender in order to expand its cybersecurity capabilities. Source: Don Davidson, DOD-CIO Trusted Mission Systems and Networks • http://www.mnn.com/earth-matters/energy/stories/smart-gridcompany-telvent-struck-by-chinese-hackers • http://news.cnet.com/8301-1009_3-57521049-83/maker-ofsmart-grid-software-discloses-hack/
Mandiant APT 1 Report – February 2012
Page 1 and 2: International Standards Efforts Hel
Page 3: Critical Infrastructure Perspective
Page 7 and 8: Success Involves Multiple Standards
Page 9 and 10: Panel Members • Nadya Bartol, Uti
Page 11 and 12: ISO/IEC 27036 - Information Securit
Page 13 and 14: Standards Landscape 3/11/2013 13 So
Page 15 and 16: ISO has over 90 existing cyber secu
Page 17 and 18: Why Use ISO/IEC 27001 • Integrate
Page 19 and 20: Existing and Emerging Practices ISO
Page 21 and 22: Using ISO/IEC 27036 with other SC27
Page 23 and 24: Contact Information • Nadya Barto
Page 25 and 26: Panel Members • Mike Grimm, Micro
Page 27: Questions

Michele Moss, Booz Allen Hamilton - Build Security In

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?