IMPLEMENTING A CYBERSECURITY MANAGEMENT SYSTEM IN AN OPERATIONAL TECHNOLOGY ENVIRONMENT
Osama Habes Sharari Al-Majali · Journal of Southwest Jiaotong University · 2024
This study provides a comprehensive threat analysis framework that combines standard IT security controls with a specific Operational Technology (OT) environment. The integration of this framework in a real-world case study and demonstration of its effectiveness in identifying potential cybersecurity threats in an OT environment are discussed in this paper. This study primarily aims to incorporate practical guidance for OT industry professionals and cybersecurity policies. Due to the proposed combination of both IT and OT security measures, the proposed framework offers an effective cybersecurity approach. Additionally, the study provides a comprehensive review of the literature. The results and evaluation of the framework led us to recommend strategies and steps that are implemented to introduce real-world directions for OT industry experts, cybersecurity policy and strategy implementers, and all people involved in cybersecurity to empower and improve the flexibility of critical OT environments against any advanced and complex cybersecurity threats.