Industrial Cybersecurity

Implementing an ICS security risk-management framework

From an abstract viewpoint, the management of ICS risks is another risk added to the list of risks confronting an organization (such as financial, safety, IT, or environmental). In each case, managers with responsibility for the business process establish and conduct a risk-management program in coordination with the top management's risk executive function. Just like the other business process areas, the personnel concerned with ICS apply their specialized subject-matter knowledge to establishing and conducting ICS security risk management and to communicating with enterprise management to support effective risk management across all of the enterprise. The following sections summarize ...