U.S. critical infrastructure faces significant risks if prioritization of cybersecurity for operational technology (OT) systems is neglected. Operational technology manages equipment like pipes and switches, which differs from information technology (IT) systems handling data. Witnesses emphasized the need for improved funding and attention to OT cybersecurity, which has often been overshadowed by IT systems. The hearing highlighted lessons from Stuxnet, a notable cyber weapon that caused physical destruction, exemplifying the critical need for securing operational technology against potential attacks.
"Despite the elevated risks associated with attacks on OT systems, this area of cybersecurity remains significantly underprioritized and underfunded," Tatyana Bolton said in her opening remarks.
"Let me be blunt: We are not prepared for a major attack on our critical infrastructure," Robert M. Lee stated in his opening.
"Stuxnet revealed the significant impact that offensive cyber tools can have on critical infrastructure. Stuxnet also demonstrated the importance of securing operational technology," said Rep. Andrew Garbarino.
"By exploiting key vulnerabilities in industrial control systems, Stuxnet proved that cybersecurity is not only an IT issue," he added.
Collection
[
|
...
]