Securing Federal Facility-related Control Systems (FRCS)

Facility-related control systems (FRCS) and other U.S. Federal government ICS & SCADA networks serve crucial roles in maintaining safe and effective operation of U.S. Government facilities both at home and abroad. Yet, these systems are often the overlooked aspects of the security of the mission, regardless of whether that mission is defense, diplomatic, or even medical.

Today, the number of FRCS have grown extensively in number and manufacturer variety. They also commonly utilize insecure protocols and legacy systems. Such conditions are largely why today, vulnerabilities within these systems – across the breadth of manufacturers – continue to grow. Without adequate security controls, they tend to be uniquely vulnerable to cyber threats. They increasingly connect to and are controlled via the internet and often offer remote access, thereby creating new attack vectors for nation states and other adversaries looking to disrupt critical assets and systems. Beyond downtime, then, an impact can also wield much broader, perhaps latent, damage. These systems can be used by adversaries as a stepping stone into the rest of the ICS & SCADA operational network and/or the IT network, sitting dormant until ‘trigger’ time.

With numerous entry points to exploit, the growing connectivity of FRCS has made it easier for adversaries to gain unfettered access to mission operations through Facility-related Control Systems (FRCS) and Federal Government buildings, bases, and operations at home and abroad. By prioritizing cybersecurity in building management practices — starting with the adoption of the above principles for securing FRCS environments — government agencies and the Services can lay the groundwork for a strong cybersecurity strategy for them. Claroty can help the U.S. Federal Government, across Services and agencies by identifying and addressing vulnerabilities in all of their FRCS, critical and otherwise.