Notes

• Linux in OT GuidelineWhat we would recommend for using linux in OT.
• Open SourceWhat we think about Open Source in the Railway industry.
• Threat: Log4jApache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related…
• Best Practice: SBOMISO/IEC 5230:2020 Information technology — OpenChain Specification Use a consistent SBOM format One basic best practice is to ensure that you follow a standard format when structuring SBOM data. Several popular SBOM formats exist,…