The Need to Protect Critical Infrastructure with Cybersecurity for IoT and OT

With the growing threat of cyberattacks on critical U.S. infrastructure, is the government prepared?

A December 1, 2022, report released by the U.S. Government Accountability Office (GAO) called for immediate action on cybersecurity for IoT and OT-connected devices to provide better security for critical infrastructure vulnerable to today’s sophisticated cyber threats.

The report indicates 16 critical infrastructure areas reliant on internet-connected devices and systems, providing essential services from electricity to health care. All sectors fall under the GAO report’s high-risk category.

A primary concern for the GAO is that more action is needed to provide the level of cybersecurity required to secure these critical U.S. departments. The GAO has provided more than 90 cybersecurity recommendations since 2010, with more than 50 unimplemented as of June 2022.

Mike Sheward, Head of Security for Particle, believes the U.S. government needs to get serious about cybersecurity for IoT and OT.

Mike’s Thoughts

“On the government accountability officers report on IOT and OT security. So, there are a couple of things that jump out to me. The first is that there are no shortage of different agencies within the federal government making recommendations about cybersecurity for these kinds of devices and having lots of different recommendations from lots of different places about lots of different types of devices is a very good way to kind of get into a state of analysis paralysis and not apply anything cause you’re worried about which standard you should be applying.

So, I would like to see more of a focus on the ecosystem that those devices are connected to. Maybe kind of sorting them out by classification so we can focus on securing that platform or that environment more than each device on a device-by-device basis. That would be probably more effective. The second thing is that a lot of the previous recommendations made in the report have not been implemented yet. That’s because, in my opinion, the government is probably still in the discovery stage for a lot of this stuff. The larger the organization, the harder it is to apply any kind of cybersecurity program.

Just because you don’t know what’s out there, you lose track of it. You can’t protect what you don’t know about. It’s hard to think of many organizations that are bigger than the federal government. So, I imagine that they are, working on doing the discovery, and so I need to focus on speeding that up so that you could probably do a lot of kind of disabling of things that no longer need to be in the environment, and then focusing on the things that are left for the new security standards.

Follow us on social media for the latest updates in B2B!


Olio executives discuss value-based care
Value-Based Care is Reshaping Patient Outcomes and Healthcare
December 7, 2023

As of recent times, the healthcare industry has been progressively shifting towards value-based care, a model that emphasizes patient outcomes over the quantity of services delivered. This transition represents a significant shift that promises to enhance patient experiences and outcomes while controlling healthcare costs. With a growing emphasis on this approach, especially over the […]

Read More
The Potential of COW Water Reuse in Dairy Industry Shows Promise for System Management and Plant Maintenance
December 7, 2023

For the latest episode of ChemAqua’s Water Solutions podcast, the focus was on an innovative approach to water conservation in the dairy industry. The show examined the potential of reusing Condensate of Whey (COW) water, a byproduct of dairy processing, and highlighted some of its economic and environmental benefits. Hosted by Dani Waddell, the informative […]

Read More
Tylping on a computer at a Family Entertainment Center
Best Practices for Implementing Venue Management Software into FECs
December 6, 2023

The implementation of venue management software is a pivotal step for businesses in the entertainment and leisure industry. Kalyn New from Roller Software shared her expertise on this subject in a soundbite from the International Association of Amusement Parks and Attractions Expo (IAAPA). Her insights focus on two main aspects: scalability and integration. New underscores […]

Read More