Industrial Cybersecurity

Case Studies and Best Practices
Erscheinungsjahr 2022
ISBN: 978-1-64331-154-8
Verlag: Wiley

Buch, Englisch, 288 Seiten, Paperback, Gewicht: 699 g

Industrial Cybersecurity: Case Studies and Best Practices

This book provides a practical overview of industrial control systems cybersecurity from governance through design and implementation to operational support. It is for anyone involved in industrial control systems cybersecurity, including asset owners, vendors, system integrators, and consultants, regardless of their level of technical expertise.

The term industrial control systems is very broad and, in this context, includes any system that is used to monitor or control physical equipment such as building control systems (e.g., heating, ventilation, and air conditioning systems), water treatment plant supervisory control and data acquisition (SCADA) systems, oil and gas distributed control systems (DCSs), and safety instrumented systems (SISs).

The author explains each phase of the process of designing, implementing, and maintaining a successful cybersecurity system, as well as the underlying issues that must be addressed. He emphasizes that the key to success is support and participation from everyone—just like successful safety programs.

Topics include:

- The differences between IT cybersecurity and industrial cybersecurity
- Creating effective policy for cybersecurity management
- How to manage cybersecurity risk through measurement
- Standardized design and vendor certification
- The pitfalls in managing cybersecurity during project delivery
- What we can learn from the safety culture
- Safeguarding operational support

Autoren/Hrsg.

Mustard, Steve

Fachgebiete

• Technische Wissenschaften Verfahrenstechnik | Chemieingenieurwesen | Biotechnologie Verfahrenstechnik, Chemieingenieurwesen
• Mathematik | Informatik EDV | Informatik Computerkommunikation & -vernetzung Netzwerksicherheit

Inhaltsverzeichnis

Acknowledgments xi

About the Author xiii

Chapter 1 Introduction 1

Chapter 2 What Makes Industrial Cybersecurity Different? 7

Chapter 3 Creating Effective Policy 29

Chapter 4 Measure to Manage Risk 55

Chapter 5 Standardized Design and Vendor Certification 85

Chapter 6 Pitfalls of Project Delivery 159

Chapter 7 What We Can Learn from the Safety Culture 181

Chapter 8 Safeguarding Operational Support 205

Chapter 9 People, Poetry, and Next Steps 233

Bibliography 235

Appendix A: Resources 245

Index 249

Über Autor(innen)

Steve Mustard, PE, CAP, GICSP, is an independent automation consultant and subject-matter expert of the International Society of Automation (ISA) and its umbrella association, the Automation Federation. He also is an ISA Executive Board member.
Backed by nearly 30 years of software development experience, Mustard specializes in: the development and management of real-time embedded equipment and automation systems; and the integration of real-time processing, decision-support and other disparate systems to improve business processes. He serves as president of National Automation, Inc.Mustard is a recognized authority on industrial cybersecurity, having developed and delivered cybersecurity management systems, procedures, training and guidance to multiple critical infrastructure organizations. He serves as the Chair of the Automation Federation's Cybersecurity Committee.
Mustard is a licensed Professional Engineer, UK registered Chartered Engineer, a European registered Eur Ing, an ISA Certified Automation Professional (CAP) and a certified Global Industrial Cybersecurity Professional (GICSP). He also is a Fellow in the Institution of Engineering and Technology (IET) and a Senior Member of ISA.