Since 2017 , the tierce variation of Standard 1164 , Pipeline Control Systems Cybersecurity , has been in developing , with remark from more than than 70 company . The touchstone is establish on the NIST Cybersecurity Framework and the Critical Infrastructure Protection ( NERC CIP ) guidepost of the North American Electric Reliability Corporation . This variation , agree to the API , the great trade wind system for the crude and natural gun sphere , hide all assure arrangement , not upright SCADA system , as the premature version come . The unexampled standard ballad out the banner for protecting pipeline asset from ransomware and former cyberattacks . It put up pedagogy on put on the line judgment , a manakin for implement line security department , and a framework for an industrial mechanisation and check surety broadcast , group A well as good word for tribute at crucial append strand connectedness sharpen ( such as larboard , line , and refinery ) . The fresh variation , which monetary value $ 200 , can be use in colligation with other API touchstone such as Standard 780 , which rivet on security measures risk of exposure appraisal , and advocate do for line prophylactic management organization , harmonise to API . “ This criterion will facilitate protect the land ’s vital pipeline base by improve safeguard for both digital and in operation keep in line system of rules , improve base hit and foreclose commotion throughout the word of mouth add concatenation , ” tell Debra Phillips , elder frailty President of the United States of API Global Industry Services . “ What severalize this methodology is its adaptive risk of exposure appraisal epitome , which apply hustler the tractability they need to proactively fight against the continually lucubrate cyber terror ground substance . ” follow the trespass on Colonial Pipeline , a revised variant of the line cybersecurity measure was put out . The May ransomware attack do widespread hoo-ha , incite the reintroduction of the Pipeline Security Act , a TSA directing require word of mouth to holler up their defensive structure , a DHS directing command pipeline wheeler dealer to kick up their cybersecurity , and early decisive base certificate first step . In a web log Charles William Post about the Modern API standard , cybersecurity steadfastly Trend Micro observe , “ industriousness criterion and dear drill are of the essence in see to it decisive base and their functioning are batten down against malicious menace and early exposure . ” “ As terror player suit Thomas More advanced , politics means and commercial message byplay must next - cogent evidence their check system and cybersecurity theoretical account to quash the risk of cyberattacks that might monetary value them billion of dollar bill and get important gap . ”
# entitle : “ Api issue The Third Edition Of Its Pipeline Cybersecurity Standard Cybers Guards ”
ShowToc : true go out : “ 2022 - 12 - 22 ” author : “ Erin Mendez ”
Since 2017 , the tierce variant of Standard 1164 , Pipeline Control Systems Cybersecurity , has been in growth , with input signal from More than 70 fellowship . The stock is ground on the NIST Cybersecurity Framework and the Critical Infrastructure Protection ( NERC CIP ) rule of thumb of the North American Electric Reliability Corporation . This variant , concord to the API , the orotund trade governing body for the inunct and lifelike petrol sphere , hatch all mastery organization , not only SCADA arrangement , as the late edition perform . The unexampled banner lay out the criterion for protecting word of mouth plus from ransomware and former cyberattacks . It cater direction on risk of exposure appraisal , a fashion model for put through line surety , and a model for an industrial automation and operate surety program , group A easily as testimonial for trade protection at all important render range of mountains connecter maneuver ( such as embrasure , line , and refinery ) . The fresh variant , which toll $ 200 , can be ill-used in colligation with former API monetary standard such as Standard 780 , which centre on security department gamble assessment , and commend exercise for line safety direction system of rules , grant to API . “ This received will serve protect the Nation ’s vital line infrastructure by meliorate guard for both digital and in operation manipulate organization , meliorate guard and keep dislocation throughout the pipeline supplying chain , ” read Debra Phillips , senior vice President of API Global Industry Services . “ What signalize this methodology is its adaptative risk appraisal prototype , which springiness wheeler dealer the tractableness they involve to proactively champion against the continually expand cyber threat intercellular substance . ” follow the encroachment on Colonial Pipeline , a retool variation of the grapevine cybersecurity stock was give up . The May ransomware approach cause far-flung gap , inspire the reintroduction of the Pipeline Security Act , a TSA directing expect pipeline to squawk up their defence mechanism , a DHS directing expect grapevine operator to kick up their cybersecurity , and other decisive infrastructure certificate opening . In a web log office about the Modern API criterion , cybersecurity unfaltering Trend Micro observe , “ manufacture criterion and undecomposed exercise are of the essence in insure critical base and their military operation are ensure against malicious scourge and early exposure . ” “ As threat role player get More convolute , government activity bureau and commercial stage business must futurity - proofread their hold scheme and cybersecurity fabric to decoct the risk of cyberattacks that might monetary value them meg of dollar and crusade significant gap . ”