NSA report includes recommendations for OT device security

Apr 29, 2025 - 08:43 AM
cybersecurity

The National Security Agency April 23 released a report on operational technology systems that includes recommendations for security policies and technical requirements for devices installed in national security systems. The report said that although it is tailored to NSS OT cybersecurity, those in the public and private sector can also use their OT devices to meet the outlined requirements to improve their cybersecurity infrastructure.  

“Network and internet-connected OT devices are ubiquitous in health care too — everything from building automation systems to badge readers on doors and life-safety systems,” said Scott Gee, AHA deputy national advisor for cybersecurity and risk. “We — as a sector — need to pay close attention to OT security as well.”  

For more information on this or other cyber and risk issues, contact Gee at sgee@aha.org. For the latest cyber and risk resources and threat intelligence, visit aha.org/cybersecurity. 

Related News Articles

Headline
Microsoft says China-based threat actors behind SharePoint attacks 
Microsoft July 22 released an update on the ongoing cyberattacks to SharePoint servers used within organizations, attributing the incidents to China-based…
Headline
Agencies warn of activity by Interlock ransomware
The FBI, Cybersecurity and Infrastructure Security Agency, Department of Health and Human Services, and Multi-State Information Sharing and Analysis Center…
Headline
Microsoft issues alert on vulnerabilities in ongoing SharePoint attacks 
Microsoft July 19 issued an alert about active attacks from vulnerabilities targeting SharePoint servers used within organizations. The incidents have not…
Headline
AHA blog: Why and How to Incorporate Physical Security Risk into Your Enterprise Risk Management
In his latest AHA Cyber and Risk Intel blog, Scott Gee, AHA deputy national advisor for cybersecurity and risk, explains how hospitals can prepare for and…
Headline
AHA resource provides strategies, best practices on sepsis care from Ochsner Health
To help hospitals across the country improve sepsis care, the Centers for Disease Control and Prevention created the Hospital Sepsis Program Core Elements,…
AHA Cyber Intel
Why and How to Incorporate Physical Security Risk into Your Enterprise Risk Management
In today’s heightened threat environment, driven by domestic and geopolitical issues, it is more critical than ever for hospitals to prepare for and mitigate…