Risk assessment objectives
The paramount objective of conducting a cybersecurity risk assessment in an ICS environment, especially related to safety critical components such as SISs, is to gain a comprehensive understanding of potential security risks lurking within the system. Achieving this objective is reliant on several key outcomes.
The following table breaks down the main objectives of an ICS cyber risk assessment:
|
Objective |
Description |
|
Identify vulnerabilities |
This involves reviewing secure network design and architecture, operation, and maintenance of safety systems to identify potential weaknesses. This involves identifying any elements of the SIS that are susceptible to cyber threats. |
|
Secure network architecture |
|
|
Effectively manage risks |
The assessment should... |
