Cybersecurity Risk Assessment Strategies Based on Process Safety Risk Assessment Techniques

Accurately identifying and analyzing potential sources of risk including equipment failure, human performance issues, and cybersecurity compromise including process safety and cybersecurity scenarios is a core part of an effective loss prevention program. The recently released CCPS book Managing Cybersecurity in the Process Industries, A Risk-based Approach discusses strategies for managing cybersecurity risk by adapting RBPS elements to address the unique challenges of cybersecurity threats. This paper will present key concepts from the book including the alignment of cybersecurity and process safety risk management and strategies for adapting process safety risk assessment techniques including PHA, Bow Tie, and LOPA for cybersecurity scenarios. Additionally, practical guidance on completing cybersecurity risk assessments will be shared from real-world case studies.