Businesses set to tackle cyberattacks

The New Zealand Cyber Security Voluntary Standards for Industrial Control Systems, with the support of the National Cyber Security Centre (NCSC), have come up with voluntary standards for the security of critical infrastructure against digital attacks.

A statement, released through the NCSC, says the standards group "is for companies in the critical national infrastructure that are dependent on SCADA (Supervisory Control and Data Acquisition) or other industrial control, process control or telemetry systems. Members share confidentially mutually beneficial information regarding electronic security threats, vulnerabilities, incidents and solutions."

The details of the standards, number of organizations, and identification of the members have been kept under wraps considering their safety.

However, one member, Mike Judge of Genesis Energy, chose to speak, on the topic. He said, " This work has allowed us to safely discuss cyber security issues, and work together with industry to develop best practice and share information."

"The participants in this group are well placed, to provide or endorse security guidance to the New Zealand utility industry," Judge adds. "Risks will vary, but this standard we have developed is a practical compilation of best practice and guidance for establishing a secure control system. The aim is to minimise the threat from unauthorised or inappropriate access, and also to maintain access and control during adverse conditions," he adds.

"These voluntary standards will be applicable for a range of New Zealand industries including electricity, oil and gas, water, transport, chemical, pharmaceutical, food and beverage, and manufacturing," Judge says.