Free Newsletter
Register for our Free Newsletters
Access Control
Deutsche Zone (German Zone)
Education, Training and Professional Services
Government Programmes
Guarding, Equipment and Enforcement
Industrial Computing Security
IT Security
Physical Security
View All
Other Carouselweb publications
Carousel Web
Defense File
New Materials
Pro Health Zone
Pro Manufacturing Zone
Pro Security Zone
Web Lec
ProSecurityZone Sponsor
ProSecurityZone Sponsor
ProSecurityZone Sponsor
ProSecurityZone Sponsor
ProSecurityZone Sponsor
ProSecurityZone Sponsor

Risk Management for Critical Infrastructure Systems

Citicus : 03 March, 2010  (New Product)
The UK Government has engaged Citicus to develop and approach to risk assessment and management for key industrial control systems
Citicus has been chosen by the UK Government's Technology Strategy Board to develop a capability for managing risks to key industrial control systems that support the critical national infrastructure. Citicus will collaborate with RWE npower and other key industry partners to deliver a major advance in the protection and security of critical information infrastructures that underpin the continuous supply of essential utilities and commodities.

The development is part of a Government-driven initiative targeted to achieve significant improvements in tackling the ever-increasing threat to organisations' information systems, through the understanding, monitoring and subsequent improved management of complex, interdependent information infrastructures. The initiative will also lead to the development of improved business resilience and risk assessment services to predict and manage risks in next generation information systems.

This major project combines the risk methodologies and technology of Citicus and their award-winning Citicus ONE Risk Management software, with the experience and skills of industry partners - who have high dependency on industrial controls systems and possess practical expertise in identifying and managing their security risks.

The project will extend the existing capabilities of Citicus ONE's Risk Management software to provide a solution optimized for identifying and managing risks in supervisory control and data acquisition (SCADA) systems and other components of industrial control systems. These systems form the critical infrastructure behind the uninterrupted and safe production and distribution of energy, water, oil/gas and food.

Citicus ONE's model for measuring risk has been uniquely developed from the world's largest set of data on what causes IT systems to suffer incidents. This project will identify the specific way in which risk factors should be evaluated for industrial control systems - using risk scorecards and supporting control and threat checklists. The use of 'risk dependency mapping' will also help identify and track interdependencies between control systems, other IT systems and other key parts of the risk chain, including external suppliers and the services they provide.

The resulting Risk Management capability will be available as an integral part of Citicus ONE and be deliverable as an installable product or as software-as-a-service (SaaS).

Paul Jervis, Chief Information Security Officer at RWE npower said, "We have used Citicus ONE for several years for managing risks in our IT environment and are very pleased to be participating in this initiative. Industrial control systems are critical to our business and have unique characteristics that need to be considered when identifying and managing risks. Combining best practice in this field with Citicus' data gathering and reporting capabilities will be of great interest to us."

Simon Oxley, Managing Director at Citicus said, "There is a lot of current interest in the robustness of critical national infrastructures in the face of evolving threats. Although there's much guidance being published - particularly through the US Department of Homeland Security - there are few automated tools that allow organizations to manage risks to industrial control systems efficiently and on a large scale. We believe this project will represent a significant step forward in ensuring the adequate protection of this infrastructure that our society takes for granted."

Marco Kapp, Director and co-founder of Citicus adds, "Citicus has a strong track record of partnering with our customers to deliver practical Risk Management tools based on real-world experience. We think the new capabilities that emerge from this collaboration will be of great interest to our customers in process-based industries."
Bookmark and Share
Home I Editor's Blog I News by Zone I News by Date I News by Category I Special Reports I Directory I Events I Advertise I Submit Your News I About Us I Guides
   © 2012
Netgains Logo