ICS Community of Interest

monitoring & logging expert group

The role of the Monitoring and Logging Expert Group (MLEG) is to provide expert input and guidance to the NCSC and the ICS Community of Interest with regard to logging and monitoring from Operational Technology (OT) for the benefit of all OT operators across the UK. This includes Industrial Control Systems (ICS) such as SCADA, DCS, PLC, and HMI systems, as well as the infrastructure and applications that support ICS environments. The intentions of the MLEG are to help improve cybersecurity logging and monitoring from OT systems to support security operations, improve resiliency of OT systems, and ultimately to support UK OT operators’ ability to improve mean-time-to-detect (MTTD) and mean-time-to-response (MTTR) to cybersecurity threats.

The group is primarily focused on producing guidance and relevant good practices via guidance documentation, with support from the NCSC, to be published on the RITICS website. The group also provides an advisory service to any questions or challenges that arise across NCSC or the UK’s ICS community of interest.

How to Join the MLEG:

If you would like to join an Expert Group, there is a 2 Stage process:

Stage 1 – You must be an existing member of the ICS COI community to join an Expert Group.

If you are not already a member of ICS COI, then please complete this Application Form.

The application process requires you to provide a short bio outlining your ICS and OT related experience.  It will take up to 4 weeks for the necessary membership approval from the ICS COI Steering Group.

Stage 2 – When you have been accepted as a member of the ICS COI you will be able to apply to join the MLEG using the following form:

It will take up to 4 weeks for your Expert Group application to be assessed and approved by the ICS COI Steering Group.

You will find further information about the ICS COI here.