Practical Industrial Cybersecurity

Chapter 9ICS Security Assessments

OBJECTIVES

Upon completion of this chapter, you should be able to:

1. Demonstrate knowledge of Security Assessment
2. Describe concepts and practices associated with ICS Device Testing:
   • Communication robustness
   • Fuzzing
   • Risk
   • Criticality
   • Vulnerability
   • Attack surface analysis
   • Supply chain
3. Apply standard practices associated with Penetration Testing and Exploitation
4. Describe the use of industry standard Security Tesing Tools:
   • Packet sniffer
   • Port scanner
   • Vulnerability scanner

Introduction

In the previous chapter, you were introduced to the cybersecurity policy generation process, as well as the risk management process. Recall that after the organization's network assets have been identified and valued, and the potential vulnerabilities and threats against it have been identified, the next step in developing the cybersecurity plan is to perform a risk assessment.

The risk assessment is a key component of the organization's risk management strategy. It identifies steps that can be taken to ensure that the organization understands the cybersecurity risk to its organizational operations (including its mission, functions, image, or reputation), its organizational assets, and its personnel.

After the threats have been identified and the risks have been quantified, the next step in the process is to conduct actual vulnerability tests on ...