ANALYZING CYBER-SECURITY RISKS IN AN INDUSTRIAL CONTROL ENVIRONMENT

摘要

A method (300) of analyzing cyber-security risks in an industrial control system (ICS) (150) including a plurality of networked devices (145) includes providing (301) a processor (110) and a memory (115) storing a cyber-security algorithm. The processor runs the cyber-security algorithm and implements data collecting (302) to compile security data including at least vulnerability data including cyber-risks (risks) regarding the plurality of networked devices by scanning the plurality of devices, processing (303) the security data using a rules engine (122) which associates a numerical score to each of the risks, aggregating (304) data including ranking the risks across the plurality of networked devices and arranging the risks into at least one logical grouping, and displaying (305) the logical grouping(s) on a user station (125).