Knowledge library
Published writing and selected references on OT/ICS security, governance, risk, resilience and industrial cybersecurity.
By Naveen Menon ·
A practical approach to defining an OT cyber risk scenario before rating it — establishing the zone, asset, criticality, threat source and level, threat action, and vulnerability before assessing likelihood and consequence.
Read on Automation.com →By Naveen Menon ·
Why a missing cybersecurity control is not automatically a business risk — and how threat scenarios, operational context, compensating controls and management-defined tolerance should shape assessment conclusions.
Read article →By Naveen Menon ·
A practical article on improving consistency in OT risk assessments by simplifying likelihood evaluation through access exposure and exploitability, viewed through an ISA/IEC 62443 perspective.
Read on Automation.com →