The Role of Consequences in Securing Cyber-Physical Systems

The importance of cybersecurity of cyber-physical systems is increasing across the wide spectrum of critical infrastructure systems and resulting in governmental attention to methods of reducing risks. Although these systems use computers to manage the communication and control of the processes, the systems are distinctly different from IT systems in business. Securing these cyber-physical systems require a different approach and set of tools. There are some unique characteristics of the physical systems under control that can be used to help mitigate risks associated with control system failures. This paper examines how security measures need to take a wider approach than just application of IT controls to a new environment if one is interested in truly managing the risk of these systems