Methods of manipulating control can include changes to set point values, tags, or other parameters. Stuxnet can reprogram a PLC and change critical parameters in such a way that legitimate commands can be overridden or intercepted. Protocols used for control functions should provide authenticity through MAC functions or digital signatures. Data backup and storage systems should be hardened and kept separate from the corporate network to prevent compromise. Maintain and exercise incident response plans 6 to maintain and exercise incidents response plans. Use out-of-band communication to validate the integrity of data from the primary channel.”]
Source: https://collaborate.mitre.org/attackics/index.php/Technique/T0831

