Brian Mast reports on the SCADA list:

Researcher: Flaw exposes hack threat
Staff and agencies
04 August, 2007
By JORDAN ROBERTSON, AP Technology Writer

LAS VEGAS - Terrorists and other criminals could
exploit a newly discovered software flaw to hijack
massive computer systems used to control critical
infrastructure like oi...

The US Department of Homeland Security released its Catalog of Control Systems Requirements (Draft) July 2007  today.

It is interesting reading. According to several commentators, it contains warnings about spam and social media-- things not entirely commonly associated with control syst...

Jake Brodsky noticed this on the Industrial Defender website:

July 26, 2007

Dear Chemical Industry Participant,

A number of chemical industry companies have recently reported that they are

receiving calls from a gro...

Ken Anderson will be speaking on security issues with Wireless applications.
I don't know what happened, but this was supposed to be given by Bryan Singer...

Anderson works for an oilsands company.

What I want to talk about is where SP99 is, and what we're doing there.

Components included based on function performed, not industry, type of control or other limited views

SCADA, etc.

We go from Level 0,1,and2 and a little of Level 3 of the purdue model.

IT security is an established disciplin...

Thanks to Bob Landman of HL Instruments for posting about this on the SCADA list:

July 12, VNUNet — Utility firms sitting on hacking time bomb.

Utility companies could be facing a hacking time bomb owing to poor security measures. As more utilitie...

How Secure are the Electric Utilities if They Implement the NERC CIP Standards?

The NERC CIP standards were developed in a consensus fashion with representation from the smallest to the largest utility organizations. In order to obtain consensus, the NERC CIP standards are ambiguous and at best provide a “minimum bar�. CIP-002 is the funnel for establishing what systems need to be addressed. If the CIP-002 risk assessment identifies the device or system...

Does Sarbanes-Oxley apply to Control Systems?The Sarbanes-Oxley Act of 2002 (often shortened to SOX) is legislation enacted in response to the high-profile Enron and WorldCom financial scandals to protect shareholders and the general public from accounting errors a...