Industrial Cybersecurity

Defining and prioritizing mitigation activities

"Dealing with the large task at hand by prioritizing and strategizing efforts."

Dealing with large amounts of risk, found in several systems, is simplified by prioritizing the mitigation activities around the discovered risk. Although oversimplified, the initial risk found for the Slumbertown Paper Mill can be prioritized as shown here:

Technical area	Discovered risk	Mitigation control	Priority
ICS network architecture	All the production-related equipment and devices are placed on the same network and VLAN. There is no logical or physical separation	Divide the Industrial network into VLANs and functional areas; subdivide functional areas into enclaves	1
ICS network architecture ...