118 If possible, verify integrity of firmware running Maintain confidence in data coming from field on field equipment via remote attestation devices by ensuring that they have not been techniques. Consult with the equipment tampered with. vendor for assistance. If remote attestation fails, the affected field device should be considered compromised and should be isolated. The table below outlines the activities and controls that are currently missing from the platform security plan of the organization. Each activity row includes columns that describe the plan to implement the activity, the schedule for implementation, and the party responsible for its implementation and maintenance. Activity / Security Existing Guideline Deviation Accept or Responsible Party Estimated Mitigation Strategy Control Mitigate Completion Risk Date
118 If possible, verify integrity of firmware running on field equipment via remote attestation techniques. Consult with the equipment vendor for assistance. If remote attestation fails, the affected field device should be considered compromised and should be isolated. Maintain confidence in data coming from field devices by ensuring that they have not been tampered with. The table below outlines the activities and controls that are currently missing from the platform security plan of the organization. Each activity row includes columns that describe the plan to implement the activity, the schedule for implementation, and the party responsible for its implementation and maintenance. Activity / Security Control Existing Guideline Deviation Accept or Mitigate Risk Responsible Party Estimated Completion Date Mitigation Strategy
2014-Coop-Cyber-Security-Plan-Template-Update-1-SampleData.docx