U.S. cybersecurity agencies hosted last week Louisiana State University (LSU) and several energy industry and critical infrastructure partners to train against simulated, high-impact cyberattacks on operational technology (OT) and traditional IT infrastructure at CISA’s Control Environment Laboratory Resource (CELR) in Idaho Falls, Idaho. LSU is the first university in the U.S. invited to participate in the CELR exercise, as part of CISA and INL’s efforts to strengthen cyber talent development and research partnerships.
The initiative by the Cybersecurity and Infrastructure Security Agency (CISA), Department of Homeland Security (DHS) Science and Technology Directorate (S&T), and the Idaho National Laboratory (INL) comes as cybersecurity threats exploit the increased complexity and connectivity of critical infrastructure systems. The potential incapacitation or destruction of assets, systems, and networks, whether physical or virtual, could have a debilitating effect on national security, economic security, and public health and safety. As the nation’s cyber defense agency, CISA is committed to growing operational and strategic partnerships to increase collaboration across the OT and industrial control systems (ICS) community.
“Collaborating with LSU and industry partners is extremely beneficial in strengthening the nation’s cybersecurity knowledge and ability to respond to threats. This training is another step in our shared vision to expand the opportunity for critical infrastructure entities to strengthen their cybersecurity using CELR,” Matt Hartman, deputy executive assistant director for cybersecurity, said in a Tuesday media statement. “Malicious cyber actors and nation-state adversaries are a persistent, highly capable threat to critical infrastructure operations, functionality, and safety. CELR is a valuable resource for critical infrastructure owners and operators seeking to improve the security of their ICS/OT networks.”
“INL’s Controls Laboratory hosts five CISA-sponsored ICS testbeds, offering immersive environments for partners to experience realistic cyberattack scenarios against critical infrastructure,” said Tim Huddleston, INL’s cybersecurity program manager. “We were proud to host industry partners and academia in this exercise, helping them improve their skills in cyber hunting and incident response, which reduces the risk from malicious cyber actors.”
“This partnership is a wonderful example of DHS S&T’s role in enabling effective, efficient, and secure operations by applying scientific, engineering, analytic, and innovative approaches to deliver timely solutions,” said Jonathan McEntee, acting executive director for the S&T Office of Mission and Capability Support.
He added that the CELR platforms help ensure critical infrastructure is better positioned to detect, mitigate, or prevent cyberattacks in the real world. By positioning a platform in close proximity to critical infrastructure owners and operators, as well as making it accessible to the next generation of oil refinery workforce through the university, DHS S&T and CISA are ensuring that the nation’s oil supply remains secure and available to consumers.
“As a leading energy and chemical manufacturing state, Louisiana’s cybersecurity posture around its critical infrastructure has national implications,” said Greg Trahan, director of economic development at LSU and special advisor to LSU President William F. Tate IV on cyber initiatives. “The invitation by CISA and INL to participate in this exercise underscores what we know: LSU has emerged as one of the most important and consequential cybersecurity schools in the country.”
Trahan added that the opportunity to be joined by industry partners means “we can bring these skills and agency relationships home to support and protect Louisiana—that is the LSU Scholarship First Agenda and flagship mission in action.”
The INL applies its scientific expertise and unique control system environments to support the Departments of Energy, Defense, and Homeland Security in addressing national security challenges, including the protection of critical infrastructure. Last week’s training exercise marked another step in an ongoing collaboration between CISA, DHS S&T, INL, and LSU to strengthen cyber defense capabilities in the energy sector. The initiative focuses on securing ICS and cultivating highly skilled cybersecurity talent for critical infrastructure.
Under the guidance of CISA and DHS S&T, INL is developing the nation’s first university-based CELR platform. Furthermore, a specialized Oil and Natural Gas CELR platform is scheduled for delivery to LSU by this fall.
LSU will operate and maintain the platform through a cooperative research and development agreement, providing hands-on training to energy sector partners, state-level cyber defenders, and the university’s faculty, staff, and students. The initiative offers a vital, locally accessible opportunity for the Gulf region’s government and industry cybersecurity professionals to build and refine their OT and ICS cybersecurity skills.
Another outcome from this collaborative effort, LSU and Battelle Energy Alliance, the company that manages INL, recently signed a memorandum of understanding to formalize their partnership in areas of mutual interest, including cybersecurity and advanced nuclear technology. Over the past year, INL has hosted six LSU cybersecurity interns and hired two LSU graduates. This collaboration exemplifies INL’s commitment to expanding partnerships with other industry and academic entities, fostering an environment to develop cyber resilience skills.
