Industrial Network Security, 2nd Edition

Chapter 8

Risk and Vulnerability Assessments

Abstract

Risk management involves an understanding of threats, vulnerabilities and consequences. To effectively manage risk, therefore, you need to understand how to identify and assess the assets in your industrial network. What devices are vulnerable, and to what types of attack? How could a specific device or system be exploited, and what would the consequences of that exploitation be? Using a variety of risk management standards and methodologies, the risk of a cyber incident can be measured, and used to improve existing security policies, countermeasures, and plans.

Keywords

Risk

Risk Management

Risk Assessment

Vulnerability assessment

Impact

Network scan

device hardening

Information ...