10 Tips for Building a Solid Cybersecurity Strategy

March 13, 2012
Ernst & Young's advice on how to keep your industrial control system safe.
  1. Co-develop and implement an Industrial Control System (ICS) cybersecurity program that focuses on identified risks -- not just regulatory compliance.
  2. Build a cross-functional cybersecurity team to develop and manage the cybersecurity program.
  3. Create and maintain an OT-environment asset inventory.
  4. Develop security policies and standards specific to ICS devices and IT systems connected to the OT environment.
  5. Understand and validate all connection points between the IT and OT environments.
  6. Use predictive threat modeling driven by the OT-environment asset inventory to identify and assess threats and vulnerabilities.
  7. Apply controls or countermeasures to complicate an attacker's ability to achieve their objectives, detect their activity and effectively respond to discovered attacks.
  8. Perform production-system and network security reviews of the OT environment, including penetration tests.
  9. Consider ICS security requirements in the vendor-management process.
  10. Develop and implement training and awareness programs that link safety and availability with good cybersecurity practices.


Source: "Insights in IT Risks" Technical Briefing, Ernst & Young, Jan. 2012

Popular Sponsored Recommendations

Empowering the Modern Workforce: The Power of Connected Worker Technologies

March 1, 2024
Explore real-world strategies to boost worker safety, collaboration, training, and productivity in manufacturing. Emphasizing Industry 4.0, we'll discuss digitalization and automation...

3 Best Practices to Create a Product-Centric Competitive Advantage with PRO.FILE PLM

Jan. 25, 2024
Gain insight on best practices and strategies you need to accelerate engineering change management and reduce time to market. Register now for your opportunity to accelerate your...

Transformative Capabilities for XaaS Models in Manufacturing

Feb. 14, 2024
The manufacturing sector is undergoing a pivotal shift toward "servitization," or enhancing product offerings with services and embracing a subscription model. This transition...

Shifting Your Business from Products to Service-Based Business Models: Generating Predictable Revenues

Oct. 27, 2023
Executive summary on a recent IndustryWeek-hosted webinar sponsored by SAP

Voice your opinion!

To join the conversation, and become an exclusive member of IndustryWeek, create an account today!