Michael Ghaly: Cybersecurity for Industrial Control Systems, Gebunden

Klappentext

Expose why IT-centric frameworks fail to protect industrial control systems

Cybersecurity for Industrial Control Systems: Frameworks, Risk Mitigation and Actionable Strategies critiques NIST CSF, ISO 27001, and CIS Controls, revealing how these IT-centric frameworks create dangerous gaps when applied to operational technology. Written by a team of cybersecurity practitioners, it exposes misaligned priorities and fundamental misunderstandings that leave power grids, water systems, and manufacturing facilities vulnerable to catastrophic attack.

The book introduces consequence-driven risk assessment methodologies and positions ISA/IEC 62443 as the blueprint for ICS-native security. It delivers actionable defenses including modern segmentation architectures, ICS-aware detection systems, and compensating controls for legacy systems. Coverage integrates safety engineering, regulatory compliance, and risk management to address why compliance alone creates false confidence in OT environments.

The book also includes:

• Analysis of how prescriptive controls clash with operational necessity when human safety and physical processes are at stake
• Strategies for securing decades-old legacy technology within increasingly connected industrial environments without disrupting critical operations
• Guidance spanning cybersecurity, safety engineering, and operational technology rather than addressing only IT security professionals
• Detailed examination of how traditional risk assessment models collapse when applied to sensors, actuators, and programmable logic controllers
• Frameworks for aligning regulatory compliance efforts with real-world OT security requirements across critical infrastructure sectors

Designed for cybersecurity engineers, OT security specialists, IT and OT managers, and critical infrastructure operators, this book addresses the full spectrum of stakeholders responsible for ICS security. Regulatory and compliance officers, policymakers, and risk managers will also find targeted guidance for aligning security programs with operational realities.