The newly formed, non-profit Security Incidents Organization announced it will provide public access to The Repository of Industrial Security Incidents (RISI).
RISI is an industry-wide repository for collecting, investigating, analyzing and sharing critical information regarding cybersecurity incidents that directly affect SCADA, manufacturing and process control systems. With about 150 incidents, RISI is the largest known collection of industrial cybersecurity incidents.
Modeled after similar safety incident databases, RISI claims to provide subscribers with reliable information that allows them to learn from others' experiences, understand the risks associated with industrial cyber-threats and adapt their current security polices in step with changing industrial cyber-security dynamics.
RISI has a history dating back to early 2001, when academic researchers developed a database called the Industrial Security Incidents Database (ISID). In 2008, several private cybersecurity experts, building on ISID, began collaboration on the RISI project with a goal of making the information available to the entire industrial automation community.
The Security Incidents Organization was established in 2009 to fulfill this goal by operating the RISI database, researching incidents, and making the results of that research publically available. For more information about the Security Incidents Organization or RISI log on to www.securityincidents.org.
