ICS Advisory Project: Alerts, Reports, & Summaries

ICS[AP] Alerts are issued for high-impact disclosures and provide practitioner-grade analysis layered on top of original vulnerability research. Each Alert adds critical infrastructure sector context, mitigation recommendations, a NERC CIP crosswalk where applicable, and detection content for asset owners and operators, and connects the disclosure to active CISA ICS Advisories. Alerts are issued as warranted, not on a fixed cadence.

ICS[AP] Analysis Reports examine cross-vendor and cross-source vulnerability patterns across the broader ICS advisory dataset. Where Alerts respond to a specific disclosure, Analysis Reports look at what disclosure trends across multiple vendors and sources reveal about the practical visibility of a vulnerability class to asset owners. Each Analysis Report draws on the CISA ICS Advisories dataset and the ICS[AP] Other CERT and Vendor ICS Advisories dataset, applies a documented methodology, and identifies tiered exposure across known-affected and known-undisclosed vendor product lines. Analysis Reports are issued as warranted, not on a fixed cadence.

ICS[AP] Summaries provide weekly summaries of new CISA ICS Advisories and other ICS security advisories released by CERTs and vendors not reported in a CISA ICS Advisory during that week, plus semi-annual and annual summaries for the year. The ICS[AP] provides this to increase the ICS/OT community awareness of these potential vulnerabilities disclosed by vendors that are and are not CVE Numbering Authorities (CNAs).