Patent Document ID: 9930058
Application ID: 14669980
Patent Flag: 1

Claim One:
1. A method of analyzing cyber-security risks (risks) in an industrial control system (ICS) including a plurality of networked devices, comprising: providing a processor and an associated memory storing a cyber-security algorithm located in a level of said ICS that is between a business-level and a device-level that includes at least one of actuators and sensors, said processor running said cyber-security algorithm and implementing: data collecting to compile security data comprising at least vulnerability data including said risks regarding said plurality of networked devices by scanning said plurality of networked devices; processing said security data using a rules engine which associates a numerical score to each of said risks; aggregating data including ranking said risks across said plurality of networked devices and arranging said risks into a plurality of security zones that each group together ones of said plurality of networked devices that can freely communicate with one another without an intervening router or firewall to indicate where a cyber-attack might spread if any one of said plurality of networked devices in said group is compromised, and displaying at least a portion of said plurality of security zones on a user station.