Managing Cybersecurity in the Process Industries: A Risk-based Approach [Hardcover]

The chemical process industry is a rich target for cyber attackers who are intent on causing harm.? Current risk management techniques are based on the premise that events are initiated by a single failure and the succeeding sequence of events is predictable. A cyberattack on the Safety, Controls, Alarms, and Interlocks (SCAI) undermines this basic assumption.? Each facility should have a Cybersecurity Policy, Implementation Plan and Threat Response Plan in place.? The response plan should address how to bring the process to a safe state when controls and safety systems are compromised. The emergency response plan should be updated to reflect different actions that may be appropriate in a sabotage situation.? IT professionals, even those working at chemical facilities are primarily focused on the risk to business systems. This book contains guidelines for companies on how to improve their process safety performance by applying Risk Based Process Safety (RBPS) concepts and techniques to the problem of cybersecurity.

List of Figures xi

List of Tables xiii

Acronyms and Abbreviations xvii

Glossary xxiii

Acknowledgments xxix

Preface xxxiii

Part 1: Introduction, Background, and History of Cybersecurity 1

1 Purpose of this Book 1

1.1 Target Audience 6

1.2 What is Cybersecurity? 6

1.3 What is Operational Technology (OT)? 10

1.4 Which industries have OT? 13

1.5 Scope 15

1.6 Organization of the Book 17

2 Types of Cyber-Attacks, Who Engages in Them and Why 19

2.1 Types of Cyber-Attacks 19

2.2 Who Commits Cybercrimes and Their Motives 26

2.3 Summary 30

3 Types of Risk Rl)