Summary:
- The National Institute of Standards and Technology (NIST) is seeking public comments on a draft document that provides guidance for reducing cybersecurity risks associated with portable storage media in operational technology (OT) environments.
- The draft document, "Reducing Cybersecurity Risks to Portable Storage Media in Operational Technology Environments," addresses the risks of using USB drives, external hard drives, and other portable storage devices in industrial control systems and other OT systems.
- The guidance includes recommendations for implementing security controls, such as restricting the use of portable storage media, scanning for malware, and maintaining an inventory of authorized devices, to help organizations protect their OT systems from cyber threats.