Chemicals Sector Develops Cyber-Security Strategy.

Business Editors

WASHINGTON--(BUSINESS WIRE)--June 24, 2002

The Chemicals Sector Cyber-Security Information Sharing Forum (Forum), a broad cross-section of trade associations and individual companies within the chemicals sector, today endorsed an industry cyber-security strategy. The U.S. Chemicals Sector Cyber-Security Strategy (Strategy) focuses on cyber-security risk management and reduction to provide secure information and process control systems that will enable collaborative business operations within the industry.

Expanding the scope of cyber-security efforts already underway in the chemicals industry, the Strategy responds to the President's Critical Infrastructure Protection Board's desire to engage both the public and private sectors in the development of security strategies. "As a critical infrastructure industry, the chemical sector's efforts to develop a cyber-security strategy demonstrate its commitment to safety and security in the information age," said Richard Clarke, Chair of the President 's Critical Infrastructure Protection Board. "The chemical sector's initiative complements the broader national strategy we are currently developing to strengthen our nation's information infrastructures."

According to the Forum, cyber-security is an integral part of overall security, and the Chemicals Sector Cyber-Security Strategy is a natural extension of the industry's proven practices for information systems, security and environmental health and safety. The cyber-security strategy leverages the industry's long history of addressing important issues proactively and delivering against self-imposed goals and standards. With the strategy initiative, the industry has come together to define an action plan to develop the cyber-security standards, products and practices necessary to shield proprietary information and facilitate safe operations.

The Forum chartered a task team comprised of 16 high-level subject matter experts from the chemicals industry to develop the strategy. The task team included members representing information security, process control security, physical security, supply chain/logistics, information technology strategy development, industry collaborations, standards development, legal and telecommunications.

The Strategy builds on established programs, including an emergency communications network and global industry associations and standards bodies, to define a cyber-security program that leverages collective knowledge, shared technology and practices development to establish industry-wide practices and voluntary standards. The recommended Chemicals Sector Cyber-Security Program includes fostering involvement and commitment across the sector; establishing a cyber-security public affairs program; establishing voluntary sector practices and standards; establishing an information sharing network; and encouraging acceleration of improved security technology and solutions development. Additionally, the proposed Cyber-Security Information Sharing Network will distribute advance warnings of cyber-security threats, vulnerabilities and incidents.

The program will also foster collaboration with information technology product and service providers, government and academia to accelerate development and implementation of improved technologies and methodologies to cost-effectively address defined vulnerabilities. By establishing an action plan for reducing current and future information security issues, the risk-based program meets both the common and unique security needs of each segment and company type in the sector.

The Chemicals Sector Cyber-Security Information Sharing Forum consists of senior-level company officials and/or staff representatives of trade associations and individual companies representing key industry segments within the sector. The Forum is led by David E. Kepler, corporate vice president and chief information officer of The Dow Chemical Company.