Connect with us

Technology

Commercial Off the Shelf Components Need Elevated Cybersecurity Protection: ISA’s New Report

Published

on

DURHAM, N.C., July 23, 2024 /PRNewswire/ — The International Society of Automation (ISA) — the leading professional society for automation — has announced the release of a white paper describing recommendations for raising the safety and security bar for automation and control systems. ISA published the paper in tandem with its ISASecure® cybersecurity certification program and the ISA Global Cybersecurity Alliance (ISAGCA).

This paper advocates for designing and certifying commercial off the shelf (COTS) products to a minimum of security level 2 (SL2) as defined in the ISA/IEC 62443 series of standards, the world’s leading consensus-based standards for control systems cybersecurity. Titled “The Case for ISA/IEC 62443 Security Level 2 as a Minimum for COTS Components,” the 23-page report outlines how SL2 criteria increases product security capabilities over the previous, less stringent requirements in SL1. SL1 security capabilities are not intended to protect against malicious or deliberate security violations. ISA’s report describes how SL2 offers stronger measures to mitigate against attack vectors that are more prevalent today.

“We are seeing an increasing number of intentional cyberattacks against industrial automation and control systems,” said Andre Ristaino, managing director, ISA conformity assessment programs. “Commercial off the shelf products are being subjected to these targeted attacks. The ISA/IEC 62443 series is the leading set of international cybersecurity standards for the operational technology (OT) landscape, and security level 2 capabilities present the ideal minimum guidelines for protecting COTS products. This new paper provides a great briefing on the security capabilities necessary to meet ISA/IEC 62443 SL2.”

The report includes a review of how SL2 criteria can increase the resiliency of COTS components in a cybersecurity incident, as well as that of any system into which the components are integrated. SL2 criteria require that a component:

Uniquely distinguish between individual human or non-human users interacting with the component, increasing the ability to trace the source for user activity that may constitute an attack

Authenticate itself to an overall system into which it has been integrated, raising the level of trust between the system and component

Provide the ability to tailor human role definitions to reflect site operations, limiting unnecessary insider access

Close inactive communication sessions that remain open as potential attack vectors

Verify the source of communications to the component, limiting sources for network attacks

Protect test interfaces from use as potential attack vectors

Increase assurance that code in execution, including mobile code, updates and upgrades came from a trusted source and has not been subject to tampering.

The Case for ISA/IEC 62443 Security Level 2 as a Minimum for COTS Components” is available for download on the ISASecure and ISAGCA websites.

About ISASecure
Founded in 2007 by the International Society of Automation (ISA), the ISASecure program’s mission is to provide the highest level of assurance possible for the cybersecurity of automation and control systems.
Founders and key supporters of ISASecure® include: BP, Chevron, ExxonMobil, Saudi Aramco, Shell, YPF, GSK, Honeywell, Johnson Controls, Schneider Electric, Trane, Yokogawa, Carrier, Siemens, YPF, Amazon Web Services, exida, TUV Rheinland, CSSC, FM Approvals, Synopsys, Trust CB, UL Solutions, SecurityGate, Interstates, BYHON, TUV SUD, ITRI and Bureau Veritas.

The Program’s ISASecure™ designation signifies to the marketplace that automation and control system products conform to industry-consensus cybersecurity standards. The ISASecure trademark provides confidence to users of ISASecure-certified products and systems and creates product differentiation for suppliers who conform to the ISASecure specifications. Learn more at www.isasecure.org.

About ISAGCA
The ISA Global Cybersecurity Alliance (ISAGCA) is a collaborative forum to advance OT cybersecurity awareness, education, readiness, standardization, and knowledge sharing. ISAGCA is made up of 50+ member companies and industry groups, representing more than $1.5 trillion in aggregate revenue across more than 2,400 combined worldwide locations. Automation and cybersecurity provider members serve 31 different industries, underscoring the broad applicability of the ISA/IEC 62443 series of standards. Learn more at www.isagca.org.

About ISA
The International Society of Automation (ISA) is a non-profit professional association founded in 1945 to create a better world through automation. ISA’s mission is to empower the global automation community through standards and knowledge sharing. ISA develops widely used global standards and conformity assessment programs; certifies professionals; provides education and training; publishes books and technical articles; hosts conferences and exhibits; and provides networking and career development programs for its members and customers around the world. Learn more at www.isa.org.

View original content to download multimedia:https://www.prnewswire.com/news-releases/commercial-off-the-shelf-components-need-elevated-cybersecurity-protection-isas-new-report-302204462.html

SOURCE The International Society of Automation

Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Technology

Learnologyworld Unveils New Domain and Partnerships for Enhanced IT Training

Published

on

By

Discover Learnologyworld’s new domain, learnologyworld.net, and exciting partnerships with Phoenix Computer Academy and WiFi Training Voucher. Expand your IT skills today!

LOS ANGELES, Sept. 28, 2024 /PRNewswire/ — Learnologyworld, the premier resource for online IT training and certification, is proud to announce two exciting new developments. This includes a brand new website domain, learnologyworld.net, and partnerships with key players in the IT training space.

Learnologyworld’s new website is available now at learnologyworld.net. The old domain, learnologyworld.com, will remain live until October 18, 2024, but visitors are encouraged to update their bookmarks to the new official home of Learnologyworld. The new domain’s launch represents Learnologyworld’s ongoing growth and innovation and its dedication to providing enhanced online experiences.

Manuel End, Co-Founder and CEO of Learnologyworld, said of the new domain, “This transition marks a significant milestone in Learnologyworld’s development, and I couldn’t be more excited.”

Learnologyworld has also teamed up with Phoenix Computer Academy (phxcomputeracademyshop.com) and WiFi Training Voucher (wifitrainingvouchers.com), two established names in online IT training and certification. This strategic expansion of Learnologyworld’s certification offerings will enhance the educational journey for both IT newcomers and experienced pros looking to add new skills.

“These exciting collaborations allow us to offer an expanded product selection, adding industry-recognized training and certification programs that our customers have long asked for,” End said. Phoenix Computer Academy offers a broad range of IT certifications, and WiFi Training Voucher specializes in real-world network training.

Learnologyworld is a leading provider of online IT training and certification programs. The company’s international presence provides learners with a global perspective on the latest trends in information technology.

IT professionals who want to add new certifications to their resumes and beginners in the field can find out more about Learnologyworld’s training programs online at https://learnologyworld.net.

About Learnologyworld

Learnology World is an online platform that provides IT professionals with the necessary expertise to succeed in the digital age. With years of experience, the platform offers a variety of certification materials, including exam vouchers for DevOps, Autodesk, and Linux users.

For media inquiries or to learn more about Learnology World’s latest discounted materials and certifications for advancing your IT career, visit learnologyworld.com.

Press Contact

Bella Rose
7402177670
https://www.learnologyworld.net/

View original content:https://www.prnewswire.com/news-releases/learnologyworld-unveils-new-domain-and-partnerships-for-enhanced-it-training-302261594.html

SOURCE Learnologyworld

Continue Reading

Technology

CGTN: Why has China’s nature reserve network proved invaluable?

Published

on

By

BEIJING, Sept. 28, 2024 /PRNewswire/ — Summer is the busiest season at Qinghai Lake, the largest saline lake in China.

Birds feed and nurture their young, herders drive yaks to the alpine pastures. Meanwhile, an army of naked carp, a species unique to the lake, gather to start their annual migration.

The fish swim in the lake, which lies in northwest China’s Qinghai Province, at an average depth of 18 meters. But the high saline and alkaline content of the lake water inhibits their gonad development, so every year from May to August the mature naked carp head to the fresh waters of the Buha River and Shaliu River, that flow into the lake, to spawn. This forms one of the great wonders of Qinghai Lake – the migration of the naked carp.

The ‘lost and found’ naked carp

The naked carp has a special place in the hearts of people in Qinghai, because it once helped save countless lives. In the 1950s and 1960s, food shortages led locals to rely on the fish for survival. The large-scale development of Qinghai Lake’s naked carp population began.

But in just a few decades, the “gift of the divine lake,” as the fish was known, was in danger of extinction due to overfishing and habitat loss. By the early 21st century, the number of naked carp in Qinghai Lake had fallen to less than 1 percent of the historical peak.

The local government implemented fishing bans and cracked down hard on illegal fishing and trading. Combined with artificial breeding and the improvement of the ecology of the lake, the carp population bounced back despite a low fertility rate.

Over time, the efforts have paid off. As of 2023, the total tonnage of naked carp in the lake had reached about 120,300 – about 44 times that of 2002. The fish’s protection status has since been downgraded from “endangered” to “vulnerable.”

The protection of the naked carp is just one example of the success of China’s conservation efforts. From giant pandas and crested ibises to golden snub-nosed monkeys, the populations of rare species have gradually grown as the country’s system of nature reserves has developed.

China is home to some of the richest biodiversity on Earth and is the only country with nearly all ecosystem types. Its natural protected areas have boosted biodiversity conservation and play a primary role in safeguarding national ecological security.

Nature reserves of various types have been established in the People’s Republic of China since its founding in 1949. Protection of endangered species has been continuously strengthened, international cooperation has grown, and the network of natural protected areas is bearing fruit.

Ecological civilization was incorporated into China’s integrated development plan in 2012, when Xi Jinping became China’s top leader. Since then, greater changes have been seen across the country as Xi emphasized the importance of seeking harmonious coexistence between humanity and nature.

“The Book of Changes (l Ching) says, ‘We should learn about the changes of the season by studying natural phenomena and foster social development by studying human phenomena. Wealth arises from following the way of heaven and earth and assisting the natural order’,” Xi said at the National Conference on Ecological and Environmental Protection on May 18, 2018.

According to the Chinese Ministry of Natural Resources, by June 2024, the country had restored over 100 million mu (about 6.7 million hectares) of ecosystems that include mountains, rivers, forests, farmlands, lakes, grasslands and deserts.

China’s protected areas cover 18 percent of its land area and 4.1 percent of its maritime area, corresponding to 90 percent of its terrestrial ecosystem types, 85 percent of wild animal populations, 65 percent of higher plant communities and nearly 30 percent of important geological relics.

The country’s nature reserves are a solid foundation for ecological environmental protection, and the “China Biodiversity Conservation Strategy and Action Plan (2023-2030)” has clarified priority areas and actions for biodiversity conservation.

China has also shouldered its international responsibilities, participated in global environmental governance and biodiversity conservation cooperation, and been the driving force for the concept of a community with a shared future for mankind, emphasizing the interdependence and common challenges faced by all countries.

https://news.cgtn.com/news/2024-09-27/Why-has-China-s-nature-reserve-network-proved-invaluable–1xezv2eED4c/p.html

View original content:https://www.prnewswire.com/news-releases/cgtn-why-has-chinas-nature-reserve-network-proved-invaluable-302261659.html

SOURCE CGTN

Continue Reading

Technology

ChoiceCash publishes two new data studies highlighting title loan application trends

Published

on

By

VAN NUYS, Calif., Sept. 27, 2024 /PRNewswire/ — ChoiceCash, a leading title loan brand offering auto equity loans to subprime borrowers in more than 20 states, has published two new data studies highlighting title loan application trends.

Published on September 10th 2024, the first data study covering average credit scores for title loan applicants reveals that the ChoiceCash product offers consumer credit to applicants with a credit profile that is well below the national average. The product-wide credit score average of 557.6 for year-to-date applications through end of August is largely consistent for applicants from all regions within the United States, ranging from 545.3 in the Northeast to 559.6 in the West.

Published on September 18th 2024, the second data study highlights title loan customer payment trends by payment method, region and loan disbursement method. This study reveals that ChoiceCash title loan customers have a clear preference for making payments using electronic payment channels, accounting for more than 90% of payments. Looking at payment channel preferences based on how the loan proceeds were disbursed at the inception of the loan, the study finds that customers’ preferences for receiving loan funds also reflect in the channels they choose for making loan payments. The study concludes that ChoiceCash’s online title loan product offer, which includes multiple ways to both receive loan proceeds and make loan payments, allows title loan customers to transact consistent with their financial preferences.

About ChoiceCash:

ChoiceCash is a vehicle-secured loan option for borrowers from all walks of life. Serving customers in more than 20 states, ChoiceCash has grown to be a premier funding option, with more than a million loan inquiries processed.

The ChoiceCash loan is made by Capital Community Bank, a Utah Charted bank, located in Provo, Utah, Member FDIC. All loans will be serviced by LoanMart. Loan proceeds are intended primarily for personal, family and household purposes. All loan applications are subject to meeting Capital Community Bank’s credit criteria, which include providing acceptable property as collateral. Customers need to demonstrate ability to repay the loan.

Contact information: media@choicecash.com

View original content:https://www.prnewswire.com/news-releases/choicecash-publishes-two-new-data-studies-highlighting-title-loan-application-trends-302261650.html

SOURCE ChoiceCash Title Loans

Continue Reading

Trending