CISA, DHS, INL, and LSU Collaborate on OT and IT Cybersecurity Training for Energy Sector
Summary
Hide β²
Show βΌ
The Cybersecurity and Infrastructure Security Agency (CISA), Department of Homeland Security (DHS) Science and Technology Directorate (S&T), Idaho National Laboratory (INL), and Louisiana State University (LSU) conducted a joint training exercise to enhance incident response and operational technology (OT) cybersecurity for energy industry partners. The exercise simulated high-impact cyberattacks on OT and IT systems at CISAβs Control Environment Laboratory Resource (CELR) in Idaho Falls, Idaho. The training aimed to improve the detection and response to kinetic cyberattacks through industrial control systems (ICS) elements, including SCADA systems, HMIs, PLCs, and other critical components. The collaboration seeks to strengthen cybersecurity knowledge and response capabilities within the energy sector and develop technical cyber talent. The training took place from April 15-17, 2025, and involved energy industry partners and a technical team simulating sophisticated adversaries. The exercise used the CELR chemical processing platform, which models critical infrastructure to represent real-world cyber-physical attack scenarios. This initiative is part of ongoing efforts to equip energy industry cyber defenders and develop deeply technical cyber talent for critical infrastructure.
Timeline
-
23.04.2025 15:00 π° 1 articles Β· β± 4mo ago
CISA, DHS, INL, and LSU Conduct Joint OT and IT Cybersecurity Training
From April 15-17, 2025, CISA, DHS S&T, INL, and LSU conducted a joint training exercise to enhance incident response and OT cybersecurity for energy industry partners. The exercise simulated high-impact cyberattacks on OT and IT systems at CISAβs Control Environment Laboratory Resource (CELR) in Idaho Falls, Idaho. The training aimed to improve the detection and response to kinetic cyberattacks through ICS elements, including SCADA systems, HMIs, PLCs, and other critical components. The collaboration seeks to strengthen cybersecurity knowledge and response capabilities within the energy sector and develop technical cyber talent for critical infrastructure.
Show sources
- CISA, DHS S&T, INL, LSU Help Energy Industry Partners Strengthen Incident Response and OT Cybersecurity β www.cisa.gov β 23.04.2025 15:00
Information Snippets
-
The exercise was held at CISAβs Control Environment Laboratory Resource (CELR) in Idaho Falls, Idaho.
First reported: 23.04.2025 15:00π° 1 source, 1 articleShow sources
- CISA, DHS S&T, INL, LSU Help Energy Industry Partners Strengthen Incident Response and OT Cybersecurity β www.cisa.gov β 23.04.2025 15:00
-
The training simulated high-impact cyberattacks on OT and IT systems.
First reported: 23.04.2025 15:00π° 1 source, 1 articleShow sources
- CISA, DHS S&T, INL, LSU Help Energy Industry Partners Strengthen Incident Response and OT Cybersecurity β www.cisa.gov β 23.04.2025 15:00
-
Participants included energy industry partners and a technical team posing as sophisticated adversaries.
First reported: 23.04.2025 15:00π° 1 source, 1 articleShow sources
- CISA, DHS S&T, INL, LSU Help Energy Industry Partners Strengthen Incident Response and OT Cybersecurity β www.cisa.gov β 23.04.2025 15:00
-
The exercise focused on detecting and responding to kinetic cyberattacks through ICS elements.
First reported: 23.04.2025 15:00π° 1 source, 1 articleShow sources
- CISA, DHS S&T, INL, LSU Help Energy Industry Partners Strengthen Incident Response and OT Cybersecurity β www.cisa.gov β 23.04.2025 15:00
-
The CELR chemical processing platform was used to model critical infrastructure and simulate real-world attack scenarios.
First reported: 23.04.2025 15:00π° 1 source, 1 articleShow sources
- CISA, DHS S&T, INL, LSU Help Energy Industry Partners Strengthen Incident Response and OT Cybersecurity β www.cisa.gov β 23.04.2025 15:00
-
The collaboration aims to strengthen cybersecurity knowledge and response capabilities within the energy sector.
First reported: 23.04.2025 15:00π° 1 source, 1 articleShow sources
- CISA, DHS S&T, INL, LSU Help Energy Industry Partners Strengthen Incident Response and OT Cybersecurity β www.cisa.gov β 23.04.2025 15:00
-
LSU is the first university invited to participate in the CELR exercise.
First reported: 23.04.2025 15:00π° 1 source, 1 articleShow sources
- CISA, DHS S&T, INL, LSU Help Energy Industry Partners Strengthen Incident Response and OT Cybersecurity β www.cisa.gov β 23.04.2025 15:00
-
INL is developing the first university-based CELR platform under CISA and S&T oversight.
First reported: 23.04.2025 15:00π° 1 source, 1 articleShow sources
- CISA, DHS S&T, INL, LSU Help Energy Industry Partners Strengthen Incident Response and OT Cybersecurity β www.cisa.gov β 23.04.2025 15:00
-
DHS S&T and CISA plan to deliver an Oil and Natural Gas CELR platform to LSU by fall 2025.
First reported: 23.04.2025 15:00π° 1 source, 1 articleShow sources
- CISA, DHS S&T, INL, LSU Help Energy Industry Partners Strengthen Incident Response and OT Cybersecurity β www.cisa.gov β 23.04.2025 15:00
-
LSU will operate and maintain the Oil and Natural Gas platform and host similar trainings for energy sector partners and students.
First reported: 23.04.2025 15:00π° 1 source, 1 articleShow sources
- CISA, DHS S&T, INL, LSU Help Energy Industry Partners Strengthen Incident Response and OT Cybersecurity β www.cisa.gov β 23.04.2025 15:00
Similar Happenings
Jaguar Land Rover Production Disrupted by Cyberattack
Jaguar Land Rover (JLR) experienced a cyberattack that severely disrupted its production and retail operations. The attack prompted the company to shut down several systems to mitigate the impact. Customer data was compromised, and the exact nature of the attack and the timeline for recovery remain unclear. The incident affected multiple systems, including those at the Solihull production plant, where popular models like the Land Rover Discovery and Range Rover are manufactured. The attack occurred over the weekend, a common time for such incidents due to reduced response capabilities. This is the second cyberattack JLR has suffered this year, raising concerns about potential vulnerabilities from the previous attack. JLR has extended the production shutdown for another week, with operations expected to resume on September 24, 2025. The company is still investigating the incident and has not attributed the breach to a specific cybercrime group.