Industrial Control Systems
Industrial control systems (ICS) and operational technology (OT) are the systems and devices that interact with the physical environment. ICS and OT are the foundation of U.S. critical infrastructure, particularly in the Energy, Water and Wastewater Systems, Transportation Systems, Critical Manufacturing, Food and Agriculture, Nuclear Reactors, Materials, and Waste, and Chemical Sectors. CISA provides guidance based on emerging threats, as well as services and tools to help secure ICS/OT.
Explore the role-specific pages below for ICS/OT cybersecurity guidance.
Role-Specific Guidance
The links below provide specific cybersecurity guidance and best practices for each of the roles in the OT ecosystem.
Featured Content
US Government Partners Urge Hardening Industrial Refrigeration and Cold Chain Monitoring Systems
This joint fact sheet outlines cyber risks to industrial refrigeration and cold chain monitoring systems and provides practical mitigation steps to reduce public internet exposure, strengthen access controls, apply updates, and monitor for suspicious
Installed Base Program
Explore CISA’s Installed Base Program, a vital partnership with leading original equipment manufacturers (OEMs) to help critical infrastructure owners and operators secure internet-exposed operational technology (OT) assets.
CI Fortify
CI Fortify is a nationwide initiative to provide information and resources to help critical infrastructure organizations increase their capabilities to isolate and recover in the event of a nation-state actor cyberattack.
CISA and FBI Release Fact Sheet for Critical Infrastructure Organizations Working With Third-Party ICS Integrators to Reduce Risk
Working with third-party integrators? Learn how to establish secure practices that support critical services while protecting your OT environment. This FBI and CISA fact sheet provides key questions and considerations for strengthening security.
News and Alerts
Check out the latest blogs, press releases, and alerts and advisories from CISA.
Considerations for Critical Infrastructure Operators Working With Third-Party ICS Integrators
Defending Against an Active Threat to Siemens S7 Series PLCs
​​Barriers to Secure OT Communication: Why Johnny Can’t Authenticate​
Please share your thoughts!
CISA is developing new content and services for OT/ICS and seeking feedback.
Get in Touch!
Can’t find what you’re looking for? Email central@cisa.dhs.gov for more information.
