SCADA Security Checklist free download

Attached sample of SCADA Security Checklist that covering area such as:
Identify all connections to SCADA networks
Disconnect unnecessary connections to the SCADA network
Evaluate and strengthen the security of any remaining connections to the SCADA network
Harden SCADA networks by removing or disabling unnecessary services
Do not rely on proprietary protocols to protect your system
Implement the security features provided by device and system vendors
Establish strong controls over any medium that is used as a backdoor into the SCADA network
Implement internal and external intrusion detection systems and establish 24-hour-a-day incident monitoring
Perform technical audits of SCADA devices and networks, and any other connected networks, to identify security concerns
Conduct physical security surveys and assess all remote sites connected to the SCADA network to evaluate their security
Establish SCADA “Red Teams” to identify and evaluate possible attack scenarios
Clearly define cyber security roles, responsibilities, and authorities for managers, system administrators, and users
Document network architecture and identify systems that serve critical functions or contain sensitive information that require additional levels of protection
Establish a rigorous, ongoing risk management process
Establish a network protection strategy based on the principle of defense-in-depth
Clearly identify cyber security requirements
Establish effective configuration management processes
Conduct routine self-assessments
Establish system backups and disaster recovery plans
Senior organizational leadership should establish expectations for cyber security performance and hold individuals accountable for their performance
Establish policies and conduct training to minimize the likelihood that organizational personnel will inadvertently disclose sensitive information regarding SCADA system design, operations, or security controls