Cybersecurity Risk Management for Critical Infrastructure Systems

No ratings

Presented at CISORichmond 2014 by

Charles Clancy

Though the connectivity of critical infrastructure and industrial control systems offers opportunities for optimization and efficiency, it also exposes such systems to increased risk. State-sponsored attackers are increasingly interested in these systems because they represent a major new unexplored target space. This combination of increased vulnerability and increased attacker interest is a bad confluence. The NIST Cybersecurity Framework offers the opportunity to take a fresh look at the protection, detection and remediation technologies to protect critical infrastructure. Charles Clancy investigates the challenges of securing critical infrastructure and building meaningful profiles against the NIST Framework in anenvironment with insufficient technology solutions.