Critical Infrastructure

The Oil and Natural Gas Subsector Cybersecurity Capability Maturity Model (ONG-C2M2) was established as a result of efforts to improve electricity subsector cybersecurity capabilities and understand the sector’s cybersecurity posture. 

The ONG-C2M2 includes core C2M2 and additional reference material and implementation guidance specifically tailored for the oil and natural gas subsector. 

The ONG-C2M2 comprises a maturity model, an evaluation tool, and DOE- DOE-facilitated self-evaluations. 

Asta leverages enterprise architecture models and frameworks to achieve comprehensive documentation of our customer’s active infrastructure. This data is used to populate the FedRAMP SSP templates for comprehensiveness. 

The complete system is then subject to a thorough and detailed RMF analysis to zero in on critical assets and assets in the critical path. Once this is done we leverage the NIST 800-53 and FedRAMP standards and more to undertake complete testing of the system. 

Security measures implemented at hydropower facilities are the responsibility of the licensee. Division of Dam Safety and Inspections (D2SI) conducts periodic security inspections of projects based on the current threat conditions and as determined by the Attorney General and the Office of Homeland Security to ensure the security of FERC hydropower projects. 

Asta supports licensees with their cybersecurity plans in support of these inspections to current threat conditions.

DHS works with the Critical Manufacturing Sector Coordinating Council for cybersecurity guidance.

Asta leverages enterprise architecture models and DHS and NIST frameworks to achieve comprehensive documentation of our clients active infrastructure.  This data is used to populate the FedRAMP SSP templates for comprehensiveness. The complete system is subject to a thorough and detailed RMF analysis to zero in on critical assets and assets in the critical path. NIST 800-53 and FedRAMP standards are 

DHS and NIST have provided security frameworks for this segment.

Asta leverages enterprise architecture models, DHS and NIST frameworks to achieve comprehensive documentation of our clients active infrastructure.  This data is used to populate the FedRAMP SSP templates for comprehensiveness. The complete system is subject to a thorough and detailed RMF analysis to zero in on critical assets and assets in the critical path. NIST 800-53 and FedRAMP standards are leveraged.

The DoD and NIST have provided security frameworks for this segment.

Asta leverages enterprise architecture models, DHS and NIST frameworks to achieve comprehensive documentation of our clients active infrastructure.  This data is used to populate CMMC, and the FedRAMP SSP templates for comprehensiveness. The complete system is subject to a thorough and detailed RMF analysis to zero in on critical assets and assets in the critical path. NIST 800-53 and FedRAMP standards are leveraged.

Various USG entities inclu have provided security frameworks for this segment.

Asta works with trusted partners to deliver compliance using appropriate security frameworks. 

Asta leverages enterprises architecture models, DHS and nist frameworks to achieve comprehensive documentation of our customer’s active infrastructure.  

The complete system is then subject to a thorough and detailed RMF analysis to zero in on critical assets and assets in the critical path. 

We leverage the NIST 800-53 and FedRAMP standards and other security frameworks to undertake complete testing of the system.