Information Assurance for SCADA

This topic could fit in two or three categories, so General seems more appropriate.

How many people on CR4 regularly access Information Assurance sites as part of their job? How many people should do the same?

I have been seeing more and more of these types of informational notices coming from the federal gov't, as well as the civilian sector. It seems that a central clearing house for this type of information is still not in place even though attacks are ongoing worldwide.

For example, there are sites from both the government: http://www.nsa.gov/ia/

...and from the manufacturers: http://www.rockwellautomation.mx/solutions/security/alerts.html

Has anybody on CR4 found a central clearing house for information which has been providing on-topic and on-time warnings, mitigations, or solutions for these types of issues?

Is there a mandatory management doctrine in place for your industrial sector?

Comments?