Download Form

First Name *

Last Name *

Title

Email - needed to receive the document. We promise to keep it private. *

Phone

Company *

Cyber Security Status

Learning about it
Interested in knowing more about Tofino
Retrofitting it into an existing system
Designing it into a new system

Download the Report:"Common Industrial Control System Vulnerability Disclosure Framework"

If you are an ICS vendor this report is an essential guide providing:

Types of vulnerabilities and how they can be remediated
Mechanisms for identifying vulnerabilities
Types of disclosures and recommended policies for handling disclosures
The building blocks for a good vulnerability disclosure framework

If you are an asset owner this report provides:

An example of what responsible vendors should be doing regarding vulnerabilities
An understanding of the disclosure process and what mitigations are possible
A vision of vulnerability handling that the ICS industry will move towards. Does it meet your needs? If not, now is the time to provide feedback.

Complete the form to the right and download the report!

You'll be on the way to improving how industry handles ICS vulnerabilities.

The ICSJWG is a body of the U.S. Dept. of Homeland Security with the goal of facilitating information sharing and reducing risk to industrial control systems.

If you have feedback on the proposed Vulnerability Disclosure Framework, send it to icsjwg@hq.dhs.gov