CS-18-10 ICS Vulnerability Assessments: Choose Your Own Adventure

Description:

Like in old “Choose your Adventure” books, each organization should choose its own path to search for vulnerabilities in their ICS systems. Through a lessons-learned approach and using examples, this presentation raises awareness about the high relevance of vulnerability assessments as part of the risk management process, presents some of the different existent methodologies and explains in depth the challenges of designing a strategy. We will highlight some of the main barriers that hinder the success of vulnerability assessments in industrial facilities and provide recommendations to make the process more streamlined as well as accurate.