OT-ISAC Launched to Reduce Cybersecurity Risks to Operational Technology Critical Information Infrastructure in Singapore

Singapore - 1 October 2019 - Global Resilience Federation Asia Pacific (GRF APAC), in partnership with the Cyber Security Agency of Singapore (CSA), today announced the launch of the Operational Technology Information Sharing and Analysis Center (OT-ISAC) to reduce cybersecurity risks to Operational Technology Critical Information Infrastructure (CII) in the city-state.

OT-ISAC will serve as a threat information sharing hub for companies in energy, water and other CII sectors in Singapore. Using proven tools and technologies, member companies can securely exchange details of OT and IT threats and attacks on their organisations, to prevent and quickly mitigate and contain damage caused by malicious actors.

OT-ISAC is managed by GRF APAC, a regional business unit of Global Resilience Federation, leveraging existing cross-sector exchange, integrated intelligence sources, and extensive analysis experience. GRF APAC has hired and continues to train local staff to educate and assist member companies with how to share, monitor, analyze, and use relevant threat intelligence including that from members, government, partner sharing communities, and vendors.

“Singapore offers a strong economy, a highly educated workforce, a central location, and an environment friendly to trade and investment. Because of its status as a commercial hub and geopolitical factors, it is a target for cyberthreats,” said Mark Orsi, President of GRF. “The creation of OT-ISAC demonstrates the commitment by CSA to address these risks and strengthen the resilience of Singapore’s utilities and sectors reliant upon OT systems.”

CSA has provided guidance and the initial financial backing for the member-based community to enhance threat information sharing, allow timely responses to cyber threats and help achieve greater resilience among OT-using organisations.

Mr. David Koh, Chief Executive, CSA said, “CSA is proud to partner with GRF to bring the OT-ISAC to Singapore. It is the first cyber intelligence and analysis sharing platform focusing on the OT space in the region. Information sharing is critical when we are dealing with sophisticated, fast-evolving cyber threats. This initiative will help to fill an important gap – cyber threats targeting OT systems. It will enhance our sectors’ cyber defences, allowing them to monitor, analyse and take prompt action to respond to cyber incidents when they occur.”

OT-ISAC benefits from the institutional experience of Global Resilience Federation, an operator and connector of information sharing and analysis centers and member companies around the world. Building on this experience, OT-ISAC is able to facilitate sharing of tactical and strategic security details, providing early insight into emerging threats, detection techniques, and containment measures. Exchanged information includes vulnerabilities and attacks to OT systems and relevant IT applications affiliated with OT systems.

Privacy and trust are vital elements of any sharing community and the Traffic Light Protocol (TLP) helps ensure that circles of trust are established to facilitate selected sharing with other member companies, government partners, sharing communities and vendor partners. Adoption of the TLP information dissemination/classification system allows OT-ISAC members to determine whether their information is shared anonymously or with attribution and with whom their information is shared. The protocol binds readers and disseminators, effectively acting as a private sector security classification system to further community engagement and information exchange, to the advantage of CII resilience.

“Malicious actors actively share company, industry and technological weaknesses on forums. They build and sell attack tools and discuss their own criminal best practices,” added Orsi. “To defeat these dynamic threats, we must be vigilant and proactive in our approach. We must build trusted communities and facilitate intelligence sharing to multiply our collective security awareness and reduce risk. We’re proud to help bring OT-ISAC to Singapore to meet this need.”

 ###

About OT-ISAC
Operational Technology Information Sharing and Analysis Center (OT-ISAC) is a secure threat information sharing community for Operational Technology Critical Information Infrastructure (CII)-using companies headquartered in Singapore. A member company can securely and anonymously share threat information with OT-ISAC analysts who further enrich and disseminate actionable alerts, intelligence and best practices for all community members to defend themselves and take mitigating action against malicious actors, their tools, and system exploits. OT-ISAC also partners with government, private vendors and other information sharing organisations to acquire and disseminate timely and relevant information for the resilience of member companies. Interested organisations in energy, water, and other OT-using sectors may contact GRF staff to inquire about membership in OT-ISAC: Cynthia Camacho, ccamacho@grfederation.org Learn more on Twitter and LinkedIn or visit www.otisac.org.  

About Global Resilience Federation
Global Resilience Federation (GRF) is a non-profit hub and integrator for support, analysis, and multi-industry intelligence exchange among information sharing and analysis centers (ISACs), organizations (ISAOs), and computer emergency readiness/response teams (CERTs). GRF’s mission is to help assure the resilience of critical and vital infrastructure against threats that could significantly impact the orderly functioning of the global economy and general safety of the public. Supported communities have access to the Cyware Situational Awareness Platform (CSAP) for secure discussion, analysis and information exchange. GRF partner communities include Operational Technology ISAC, Financial Services ISAC, Retail ISAO, Retail and Hospitality ISAC, Legal Services ISAO, Energy Analytic Security Exchange, Health ISAC, Professional Services Information Exchange, Oil and Natural Gas ISAC, and Downstream Natural Gas ISAC. Learn more at www.GRFederation.org, by visiting @GRFederation on Twitter or Global Resilience Federation on LinkedIn. Media questions may be directed to Patrick McGlone at pmcglone@grfederation.org

Pat McGlone