Security Introduction Framework for Operational Technologies and Applying to Industrial Control System

摘要

Business owners of control systems have to ensure their system operations are protected from various security threats. Especially for control systems in critical infrastructures, business owners should deploy security countermeasures that fulfill mission assurance to continue their business function. The purpose of this paper is to introduce security measures that enable business continuation along with satisfying mission assurance. The proposed security introduction framework in this paper enables business owners of control systems to obtain exhaustive security measures from the viewpoint of technical, operational, and management aspects with reasonable effort. The proposed security introduction framework can be applied to a wide variety of control systems.