We investigated allegations that the Supervisory Control and Data Acquisition (SCADA) system at the Grand Canyon National Park (Park) may be obsolete and likely to fail. Because the SCADA system monitors and controls critical infrastructure functions at the Park, we consulted the U.S. Department of Homeland Security Industrial Control Systems Cyber Emergency Response Team (ICS-CERT) and asked that they assess the Park’s industrial control system.
ICS-CERT identified a number of weaknesses, including obsolete hardware and software, inadequate system documentation and policies, insufficient logging and data retention. We sent a copy of ICS-CERT’s assessment report to the National Park Service for review and action and closed the investigation with no further action.