Handbook of SCADA/Control Systems Security

Robert Radvanovsky, CIPS, is an active security professional in the United States with knowledge in security, risk management, business continuity, disaster recovery planning, and remediation. He obtained his master's degree in computer science from DePaul University in Chicago, and he has significantly contributed toward establishing several certification programs, specifically on the topics of critical infrastructure protection and critical infrastructure assurance. He has special interest and knowledge in matters of critical infrastructure and has published a number of articles and white papers regarding this topic, and has authored or coauthored several books in the field. Though he has been significantly involved in establishing security training and awareness programs through his company, Infracritical, he also works with several professional accreditation and educational institutions on the topics of homeland security, critical infrastructure protection and assurance, and cybersecurity.

This comprehensive handbook covers fundamental security concepts, methodologies, and relevant information pertaining to supervisory control and data acquisition (SCADA) and other industrial control systems used in utility and industrial facilities worldwide. Including six new chapters, six revised chapters, and numerous additional figures, photos, and illustrations, it addresses topics in social implications and impacts, governance and management, architecture and modeling, and commissioning and operations. It presents best practices as well as methods for securing a business environment at the strategic, tactical, and operational levels.

SOCIAL IMPLICATIONS AND IMPACTS. Introduction. Sociological and Cultural Aspects. Threat Vectors. Risk Management. International Implications of Securing Our SCADA/Control System Environments. Aurora Generator Test. GOVERNANCE AND MANAGEMENT. Disaster Recovery and Business Continuity of SCADA. Incident Response and SCADA. Forensics Management. Governance and Compliance. Project Management for SCADA Systems. ARCHITECTURE AND MODELING. Communications and Engineering Systems. Metrics Framework for a SCADA System. Networking Topology and Implementation. Active Defense in Industrial Control-System Networks. Open-Source Intelligence (OSINT). COMMISSIONING AND OPERATIONS. Obsolescence and Procurement of Industrial Control Systems. Patching and Change Management. Physical Security Management. Tabletop/Red-Blue Exercises. Integrity Monitoring. Data Management and Records Retention. CONCLUSION. The Future of SCADA and Control Systems Security. Appendices.