Vulnerability Assessment for Critical Infrastructure Control Systems

Assessing security in critical control systems is a particular task that can have dangerous real-world consequences if done poorly or according to more traditional security assessments. In 2006, the North American Electric Reliability Corporation adopted the Critical Infrastructure Protection standards for cyber vulnerability assessment of critical infrastructure control systems. Such CIP assessments entail challenges at each stage, from planning and assessing to reporting results and recommending vulnerability mitigation approaches.