(85a) Cyber Risk Assessment Methodologies - Compare and Contrast Different Approaches ISA 62443, INL Cce

Today’s automation systems are much more highly connected than they were at the start of this millennium. Advances is technology, the cost of computing and the speed of communication in just the last seven years have brought industries higher performance, optimization, visibility, advanced system diagnostics with high reliability and availability fault tolerance, analytics and production yields that unquestionably have revolutionized all industry sectors. Convergence of site automation system technologies and traditional enterprise IT systems have become more prevalent and provide opportunities such as the remote mobile worker, integration into MES and ERP systems and remote access for troubleshooting and support. While this has benefits it also brings inherent risk to plant operating environments.

This talk will review and compare the standards-based (ISA 62443-3-2) approach and the Consequence-driven Cyber-informed Engineering (Idaho National Labs CCE) methodologies.