Suggerisco di scaricare questi 3 volumi, in versione finale, del NIST su:"Cybersecurity Framework Manufacturing Profile Low Impact Level Example - Implementations Guide". Riporto per chiarezza una parte dell'abstract. "This guide provides general implementation guidance and example proof-of-concept solutions demonstrating how available open-source and commercial off-the-shelf (COTS) products could be implemented in manufacturing environments to satisfy the requirements in the Cybersecurity Framework (CSF) Manufacturing Profile Low Impact Level. ...." Cordialità, Aldo Pedico Mobile +39.3482244924 a.pedico@teleion.it<https://owa.teleion.it/OWA/redir.aspx?SURL=DUZCqLdUdoandbWpBmWHxyBfsbaJ9ubkZ...> TELEION s.r.l. Via Ferrero 31 – 10098 Rivoli (TO) www.teleion.it<http://www.teleion.it> ________________________________ From: NIST Computer Security Division <csrc.nist@service.govdelivery.com> Sent: martedì 1 ottobre 2019 16:10 To: Aldo Pedico Subject: Cybersecurity Framework Manufacturing Profile Low Impact Level Example Implementations Guide Released An Implementation Guide for the Cybersecurity Framework (CSF) Manufacturing Profile Low Impact Level has been developed for manufacturers managing cybersecurity risk that is aligned with manufacturing sector goals and industry best practices. Many small and medium-sized manufacturers have expressed challenges in implementing a standards-based cybersecurity program. The Guide drives the CSF Manufacturing Profile to practice and will enable manufacturers to select and deploy cybersecurity tools and techniques that best fit their needs while addressing the demanding system operational performance, reliability, and safety requirements. The Guide provides general implementation guidance (Volume 1) and two complete example proof-of-concept solutions demonstrating how available open-source and commercial off-the-shelf products can be implemented in manufacturing environments to satisfy the Guide’s requirements. Also included are the complete example proof-of-concept solutions with measured network, device, and operational performance impacts for a process-based manufacturing environment (Volume 2), and a discrete-based manufacturing environment (Volume 3), as well as example proof-of-concept cybersecurity policy and procedure documents. The volumes of this Guide (NISTIR 8183A, Cybersecurity Framework Manufacturing Profile Low Impact Level Example Implementations Guide) include: * Volume 1, General Implementation Guidance * Volume 2, Process-based Manufacturing System Use Case * Volume 3, Discrete-based Manufacturing System Use Case The CSF Manufacturing Profile—specified in NISTIR 8183—provides a voluntary, risk-based approach for managing cybersecurity activities and cyber risk to manufacturing systems. The Manufacturing Profile is meant to complement but not replace current cybersecurity standards and industry guidelines that the manufacturer is embracing. Publication details for NISTIR 8183A: *Volume 1: https://csrc.nist.gov/publications/detail/nistir/8183a/vol-1/final<http://links.govdelivery.com:80/track?type=click&enid=ZWFzPTEmbXNpZD0mYXVpZD0mbWFpbGluZ2lkPTIwMTkxMDAxLjEwODk5MjUxJm1lc3NhZ2VpZD1NREItUFJELUJVTC0yMDE5MTAwMS4xMDg5OTI1MSZkYXRhYmFzZWlkPTEwMDEmc2VyaWFsPTE2Nzk1MDU0JmVtYWlsaWQ9YS5wZWRpY29AdGVsZWlvbi5pdCZ1c2VyaWQ9YS5wZWRpY29AdGVsZWlvbi5pdCZ0YXJnZXRpZD0mZmw9Jm12aWQ9JmV4dHJhPSYmJg==&&&100&&&https://csrc.nist.gov/publications/detail/nistir/8183a/vol-1/final> *Volume 2: https://csrc.nist.gov/publications/detail/nistir/8183a/vol-2/final<http://links.govdelivery.com:80/track?type=click&enid=ZWFzPTEmbXNpZD0mYXVpZD0mbWFpbGluZ2lkPTIwMTkxMDAxLjEwODk5MjUxJm1lc3NhZ2VpZD1NREItUFJELUJVTC0yMDE5MTAwMS4xMDg5OTI1MSZkYXRhYmFzZWlkPTEwMDEmc2VyaWFsPTE2Nzk1MDU0JmVtYWlsaWQ9YS5wZWRpY29AdGVsZWlvbi5pdCZ1c2VyaWQ9YS5wZWRpY29AdGVsZWlvbi5pdCZ0YXJnZXRpZD0mZmw9Jm12aWQ9JmV4dHJhPSYmJg==&&&101&&&https://csrc.nist.gov/publications/detail/nistir/8183a/vol-2/final> *Volume 3: https://csrc.nist.gov/publications/detail/nistir/8183a/vol-3/final<http://links.govdelivery.com:80/track?type=click&enid=ZWFzPTEmbXNpZD0mYXVpZD0mbWFpbGluZ2lkPTIwMTkxMDAxLjEwODk5MjUxJm1lc3NhZ2VpZD1NREItUFJELUJVTC0yMDE5MTAwMS4xMDg5OTI1MSZkYXRhYmFzZWlkPTEwMDEmc2VyaWFsPTE2Nzk1MDU0JmVtYWlsaWQ9YS5wZWRpY29AdGVsZWlvbi5pdCZ1c2VyaWQ9YS5wZWRpY29AdGVsZWlvbi5pdCZ0YXJnZXRpZD0mZmw9Jm12aWQ9JmV4dHJhPSYmJg==&&&102&&&https://csrc.nist.gov/publications/detail/nistir/8183a/vol-3/final> Related publication: *NISTIR 8183, Cybersecurity Framework Manufacturing Profile: https://csrc.nist.gov/publications/detail/nistir/8183/final<http://links.govdelivery.com:80/track?type=click&enid=ZWFzPTEmbXNpZD0mYXVpZD0mbWFpbGluZ2lkPTIwMTkxMDAxLjEwODk5MjUxJm1lc3NhZ2VpZD1NREItUFJELUJVTC0yMDE5MTAwMS4xMDg5OTI1MSZkYXRhYmFzZWlkPTEwMDEmc2VyaWFsPTE2Nzk1MDU0JmVtYWlsaWQ9YS5wZWRpY29AdGVsZWlvbi5pdCZ1c2VyaWQ9YS5wZWRpY29AdGVsZWlvbi5pdCZ0YXJnZXRpZD0mZmw9Jm12aWQ9JmV4dHJhPSYmJg==&&&103&&&https://csrc.nist.gov/publications/detail/nistir/8183/final> __________ Notification Sent By: NIST Computer Security Division (CSD) P. O'Reilly, NIST CSD webmaster-csrc@nist.gov<mailto:webmaster-csrc@nist.gov> (Attn: NISTIR 8183 Authors) ________________________________ [NIST]<http://links.govdelivery.com:80/track?type=click&enid=ZWFzPTEmbXNpZD0mYXVpZD...> Questions? Contact Us<http://links.govdelivery.com:80/track?type=click&enid=ZWFzPTEmbXNpZD0mYXVpZD...> STAY CONNECTED: [http://content.govdelivery.com/attachments/fancy_images/USNIST/2015/10/64929...] <http://links.govdelivery.com:80/track?type=click&enid=ZWFzPTEmbXNpZD0mYXVpZD...> [http://content.govdelivery.com/attachments/fancy_images/USNIST/2015/10/64928...] <http://links.govdelivery.com:80/track?type=click&enid=ZWFzPTEmbXNpZD0mYXVpZD...> [http://content.govdelivery.com/attachments/fancy_images/USNIST/2015/10/64930...] <http://links.govdelivery.com:80/track?type=click&enid=ZWFzPTEmbXNpZD0mYXVpZD...> [http://content.govdelivery.com/attachments/fancy_images/USNIST/2015/10/64926...] <http://links.govdelivery.com:80/track?type=click&enid=ZWFzPTEmbXNpZD0mYXVpZD...> [http://content.govdelivery.com/attachments/fancy_images/USNIST/2015/10/64933...] <http://links.govdelivery.com:80/track?type=click&enid=ZWFzPTEmbXNpZD0mYXVpZD...> SUBSCRIBER SERVICES: Manage Preferences<http://links.govdelivery.com:80/track?type=click&enid=ZWFzPTEmbXNpZD0mYXVpZD...> | Unsubscribe<http://links.govdelivery.com:80/track?type=click&enid=ZWFzPTEmbXNpZD0mYXVpZD...> | Help<http://links.govdelivery.com:80/track?type=click&enid=ZWFzPTEmbXNpZD0mYXVpZD...> ________________________________ If you have questions or problems with the subscription service, please contact subscriberhelp.govdelivery.com<http://links.govdelivery.com:80/track?type=click&enid=ZWFzPTEmbXNpZD0mYXVpZD...>. Technical questions? Contact inquiries@nist.gov<mailto:inquiries@nist.gov>. (301) 975-NIST (6478). This service is provided to you at no charge by National Institute of Standards and Technology (NIST). 100 Bureau Drive, Stop 1070 · Gaithersburg, MD 20899 · 301-975-6478 [GovDelivery logo] <http://links.govdelivery.com:80/track?type=click&enid=ZWFzPTEmbXNpZD0mYXVpZD...>