登录
注册
您所在的位置:首页>>报告>>报告详情

能源部门资产管理:用于电力,石油和天然气行业

Energy Sector Asset Management: For Electric Utilities, Oil & Gas Industry

【作       者】:
【机       构】: 美国国家标准与技术研究院
【承研机构】:

【原文地址】: https://www.nist.gov/publications/energy-sector-asset-management-electric-utilities-oil-gas-industry
【发表年份】:

2020

摘要

工业控制系统(ICS)构成了国家关键基础设施的核心部分。能源行业的公司依靠ICS来产生,传输和分配电力,以及钻探,生产,提炼和运输石油和天然气。鉴于提供了有关操作技术(OT)网络的命令和控制信息的ICS资产种类繁多,例如可编程逻辑控制器和智能电子设备,因此必须保护这些设备以保持操作的连续性。必须监视和管理这些资产,以降低在ICS网络环境中遭受网络攻击的风险。拥有准确的OT资产清单是整个网络安全策略的关键组成部分。NIST SP 1800-23B:能源部门资产管理iii NIST的NCCoE正在响应能源部门对自动化OT资产管理解决方案的要求。为了保持全面运转,能源部门实体应该能够有效地识别,控制和监视其旧有资产。本文档提供了有关如何通过利用能源组织的运营环境中可能已经存在的功能以及实施新功能来增强OT资产管理实践的指南。

标签: {{b}}
展开
英文摘要

Industrial control systems (ICS) compose a core part of our nation?s critical infrastructure. Energy sector companies rely on ICS to generate, transmit, and distribute power and to drill, produce, refine, and transport oil and natural gas. Given the wide variety of ICS assets, such as programmable logic controllers and intelligent electronic devices, that provide command and control information on operational technology (OT) networks, it is essential to protect these devices to maintain continuity of operations. These assets must be monitored and managed to reduce the risk of a cyber attack on ICS-networked environments. Having an accurate OT asset inventory is a critical component of an overall cybersecurity strategy. NIST SP 1800-23B: Energy Sector Asset Management iii The NCCoE at NIST is responding to the energy sector?s request for an automated OT asset management solution. To remain fully operational, energy sector entities should be able to effectively identify, control, and monitor their OT assets. This document provides guidance on how to enhance OT asset management practices by leveraging capabilities that may already exist in an energy organization?s operating environment as well as implementing new capabilities.

标签: {{b}}