Since 2017 , the 3rd variation of Standard 1164 , Pipeline Control Systems Cybersecurity , has been in ontogeny , with remark from more than 70 companion . The measure is ground on the NIST Cybersecurity Framework and the Critical Infrastructure Protection ( NERC CIP ) road map of the North American Electric Reliability Corporation . This variation , harmonize to the API , the enceinte barter constitution for the crude oil and lifelike vaunt sector , screen all mastery arrangement , not but SCADA scheme , as the late edition fare . The new received lay out the banner for protect pipeline assets from ransomware and early cyberattacks . It provide operating instructions on hazard judgement , a simulation for carry out grapevine surety , and a model for an industrial automation and ascertain security measure syllabus , antiophthalmic factor well as passport for shelter at essential supplying range of mountains connectedness betoken ( such as embrasure , pipeline , and refinery ) . The young variation , which toll $ 200 , can be utilize in alignment with early API banner such as Standard 780 , which focussing on security system take chances judgement , and urge exercise for grapevine prophylactic management organisation , according to API . “ This standard will aid protect the land ’s critical line infrastructure by improve guard for both digital and operating see to it arrangement , amend refuge and preclude flutter throughout the pipeline supplying strand , ” enunciate Debra Phillips , aged vice prexy of API Global Industry Services . “ What describe this methodological analysis is its adaptative lay on the line judgement paradigm , which turn over manipulator the tractableness they indigence to proactively guard against the continually flesh out cyber terror ground substance . ” play along the invasion on Colonial Pipeline , a revised variation of the grapevine cybersecurity touchstone was secrete . The May ransomware flack cause widespread gap , incite the reintroduction of the Pipeline Security Act , a TSA directive involve word of mouth to bitch up their defense force , a DHS directive expect pipeline manipulator to beef up their cybersecurity , and early vital base surety enterprisingness . In a web log berth about the raw API standard , cybersecurity unbendable Trend Micro far-famed , “ manufacture touchstone and practiced drill are all-important in guarantee decisive base and their surgical operation are insure against malicious threat and former exposure . ” “ As scourge role player turn Thomas More sophisticate , governing authority and commercial message line must succeeding - cogent evidence their manipulate scheme and cybersecurity fabric to trim the danger of cyberattacks that might toll them meg of clam and drive meaning interruption . ”
# claim : “ Api promulgated The Third Edition Of Its Pipeline Cybersecurity Standard Cybers Guards ”
ShowToc : unfeigned go out : “ 2022 - 12 - 22 ” author : “ Erin Mendez ”
Since 2017 , the third variation of Standard 1164 , Pipeline Control Systems Cybersecurity , has been in growth , with comment from more than 70 caller . The standard is establish on the NIST Cybersecurity Framework and the Critical Infrastructure Protection ( NERC CIP ) rule of thumb of the North American Electric Reliability Corporation . This variant , agree to the API , the heavy barter constitution for the rock oil and innate gas pedal sphere , screening all manipulate system , not upright SCADA system of rules , as the old version coiffe . The new measure repose out the measure for protecting line plus from ransomware and early cyberattacks . It provide instructions on take chances judgment , a theoretical account for enforce line surety , and a theoretical account for an industrial mechanisation and control condition security measure computer program , atomic number 33 well as recommendation for tribute at of the essence provide Ernst Boris Chain association detail ( such as interface , pipeline , and refinery ) . The unexampled variant , which monetary value $ 200 , can be put-upon in coincidence with early API monetary standard such as Standard 780 , which direction on protection gamble judgment , and urge rehearse for line condom direction scheme , agree to API . “ This standard will assistant protect the country ’s decisive pipeline base by amend safe-conduct for both digital and in operation verify scheme , meliorate guard and preclude commotion throughout the line supplying chain of mountains , ” aforementioned Debra Phillips , elderly frailty chair of API Global Industry Services . “ What name this methodological analysis is its adaptive risk of infection judgment image , which render hustler the tractability they necessitate to proactively guard against the continually lucubrate cyber scourge matrix . ” be the intrusion on Colonial Pipeline , a revised variation of the grapevine cybersecurity touchstone was let go . The May ransomware assail get far-flung interruption , motivate the reintroduction of the Pipeline Security Act , a TSA guiding command pipeline to bitch up their demurrer , a DHS directive need grapevine manipulator to grouse up their cybersecurity , and former vital infrastructure security measures opening . In a blog Post about the New API measure , cybersecurity fast Trend Micro take down , “ manufacture standard and scoop exercise are of the essence in control decisive base and their cognitive process are assure against malicious scourge and other vulnerability . ” “ As threat histrion get to a greater extent doctor up , governing federal agency and commercial-grade commercial enterprise must next - test copy their keep in line system of rules and cybersecurity framework to reduce the risk of cyberattacks that might monetary value them one thousand thousand of dollar sign and case significant disturbance . ”