Voluntary private standards provide a basis for building and institutionalizing collaborative approach cybersecurity

Nov 12

Editor’s Note: Federal law favors the use of voluntary, private standards over government-developed standards in regulations and procurement. See An Updated Look at the Federal Policies Governing How Agencies Use Voluntary Consensus Standards in Regulatory, Procurement, and Science Documents. See also Why OIRA Needs to Coordinate Federal Cyber Security Regulation.

From: Oil & Gas Journal

Use more collaborative cybersecurity approach, groups urge government

By Nick Snow, Washington Editor

Reliance upon proven risk management-based frameworks and public-private collaboration, instead of prescriptive regulation, is the most effective way to bolster the cybersecurity of the oil and gas industry and the critical infrastructure companies in it operate, a recent report from two industry groups concluded.

“With the increasing sophistication and adaptiveness of cyber adversaries, it is essential that industry be afforded the necessary flexibility and agility to respond to a constantly changing threat landscape, and that government and industry continue to partner to share cyber threat intelligence and strengthen cyber defenses,” the report from the Natural Gas Council and the Oil & Natural Gas Sector Coordinating Council said.

Read Complete Article