Control systems cyber security - understanding the issues and addressing them

Cyber war is an emotive term, suggesting that there are enemies out in cyberspace locked in battle against the forces of good who are, in this case, the critical infrastructure operators. Most people would accept that this notion is true to some extent, but do we really know to what extent, and is the notion enough to base a business case on? If we want to develop a robust business case to address cyber security, we must determine the reality that lies at the root of the fantasy. Just who are enemy or enemies, what weapons are they using, in what way are we at risk of attack and why? We need to identify our allies and bring them on-board, and we need to identify our points of weakness and plug them. Finally, we must ensure that our command and control structures are in place to fight the ongoing battles. This presentation would discuss KEMA's approach to identifying and addressing these issues.