Industrial Control Systems Cyber Emergency Response Team

When a malicious computer virus, spyware, or deliberate cyber hack penetrates your firewall and brings your e-mail and Web browsing to a grinding halt, it’s frustrating. When that same threat penetrates a control system operating a critical infrastructure like the electric power grid, refinery, or chemical plant, it’s a matter of national security.

Right now, cyber attacks are not only possible, they’re happening. Everyday. And since many modern infrastructures rely on data acquisition systems, human machine interfaces and wireless nodes, identifying and correcting potential cyber intrusions and emerging threats is essential to stopping widespread disruptions, service losses, and economic impacts.

In 2009, the U.S. Department of Homeland Security’s National Cyber Security Division launched the nation’s first dedicated response center aimed at reducing the frequency and effect of cyber attacks on industrial control systems that operate the nation’s critical infrastructures and key resources.

Known as the ICS-CERT, or Industrial Control Systems Cyber Emergency Response Team, this expertly staffed, state-of-the-art facility monitors, collects, and analyzes cyber incidents reported by industrial control systems researchers and developers, owners and operators, and manufacturers from industry, government, academia, and tribal nations.

Quick Facts

• The ICS-CERT’s Security Operations Center is located at Idaho National Laboratory.
• The facility and staff respond and analyze control systems cyber incidents in 18 critical infrastructure sectors.
• The ICS-CERT also provides:
  • Vulnerability, threat, and malware analysis,
  • Onsite support for forensic investigations,
  • Situational awareness and actionable intelligence.
• The ICS-CERT collaborates with private industry through ISACs and working groups.
• The ICS-CERT coordinates activities with the US-CERT and the National Cybersecurity and Communications Integration Center.