Patent ID: 8621637

Claim:
A computer-assisted method of performing a cyber security risk assessment on a plurality of process control networks and systems comprising a plurality of primary network assets at an industrial process facility, the method comprising the steps of: identifying each of the plurality of primary networked assets within the plurality of process control networks and systems to thereby identify associated networks and systems topology, network systems and asset security, and asset utilization; analyzing network asset integrity, with assistance of a computer, to include identifying networks and systems topology, network systems and asset security, and asset utilization to thereby determine susceptibility to each of a plurality of known threats; identifying, with assistance of the computer, each of a plurality of network and asset vulnerabilities when so existing responsive to determining network and asset susceptibility to each of the plurality of known threats; for each of the plurality of primary network assets of the plurality of process control networks and systems, determining, with assistance of the computer, a loss value associated with loss of control of the respective asset for each of a plurality of impact categories, the plurality of impact categories comprising injury, financial loss, environmental release, interruption of production, and public image associated with a loss of control of the respective asset; for each of the plurality of known threats and for each separate identified vulnerability exploitable by the respective threat, determining a categorical likelihood of occurrence of an undesirable event associated with exploitation of each respective associated identified vulnerability by the respective threat to thereby determine a separate categorical likelihood rating for the respective threat with reference to each respective associated identified vulnerability, and determining a categorical impact severity level defining anticipated consequences of loss of control associated with exploitation of each respective identified vulnerability exploitable by the respective threat for each separate one of a plurality of impact categories to thereby determine a highest impact severity level rating associated therewith, and determining a risk level rating responsive to the categorical likelihood rating and the highest impact severity level rating for the respective threat with reference to each respective identified vulnerability exploitable by the respective threat; and for each identified network and asset vulnerability, determining a highest risk level rating from among the risk level ratings associated with each impact category of the plurality of impact categories affected by an associated threat capable of exploiting the respective vulnerability when so existing identifying a mitigation plan responsive to the highest determined risk level, and executing the mitigation plan.