The connectivity and computational capabilities are transforming the way we do things -- it is certainly the case in both connected plants and industry 4.0. The cyber-physical systems together with Internet of Things (IoT), Big Data and Cloud Computing in Industry 4.0 offer promises to deliver improved productivity, quality, and compliance.

 

The exponentially increasing connectivity within these systems of systems, however, also raises concerns around cybersecurity; more connected Things means expanded attack surface for hackers! Many studies have demonstrated that at least 35% of connected devices or equipment in a facility tend to have security vulnerabilities. A recent survey indicated some 54% of utility sector expected an attack on critical infrastructure during 2020. The water infrastructure has seen numerous attacks on OT in 2018 and 2019. In fact, former Homeland Security Secretary Michael Chertoff calls it a “real national security issue.”

 

Utilities face many challenges in managing cybersecurity risk involving cyber-physical systems starting from lack of visibility into operating assets to keep track of vulnerabilities and threat vectors. To make the matter worse, the typical IT security practices are NOT effective on OT/IoT devices and physical systems.

 

Hence, organizations considering Industry 4.0 should also consider building a robust risk management program that includes identification of risks, and adequate policies, procedures, resources, personnel, and organizational structures to manage those risks effectively.

 

From this session, attendees will gain understanding of (a) risk involving cyber-physical systems (b) ROI minded risk-based approach in managing OT/IoT cybersecurity risk (c) how to operationalize an OT cybersecurity program in alignment with organization’s risk oversight process, and (d) how best to structure an organization to effectively incorporate and manage technology.


Risk-Based Approach to Cybersecurity in Connected Plant With Cyber-Physical Systems

Division / Sponsors: 
Power Division & Nuclear Engineering Division (NED)

Power Conference
Paper Proceedings: https://asmedigitalcollection.asme.org/POWER/POWER2020/volume/83747

International Conference on Nuclear Engineering
Paper Proceedings: https://asmedigitalcollection.asme.org/ICONE/ICONE2020/volume/83761

POWER-ICONE - Virtual Conference

Supporting the need among researchers worldwide for additional online and multimedia content, ASME now offers the ASME Conference Video Collection. This platform will collect and provide long-term access to conference presentation videos, encompassing all technology areas within ASME's technical conference and events program. About 30,000-40,000 engineers across all mechanical engineering and related disciplines participate in ASME conferences each year. This includes authors of approximately 6,000 to 8,000 technical papers published by ASME, the majority of whom also submit video presentations for our virtual conferences. The video collection will be available as an add-on to existing product packages or as a separate subscription.