A better way to do OT cyber risk assessments

Please join Bruce as he outlines his approach to OT Cyber Security Risk Management. The purpose of this session is to show an alternative method to OT Cyber Security risk management and help the think tank attendees appreciate the rationale of using OT specific cyber security risk approaches. 

Operational Technology (OT) Cyber Security has many differences to IT Cyber Security especially when assessing risk and consequence. Unfortunately, our industry tends to still use standard IT Risk Management approaches for OT and this causes frustration with OT stakeholders and often leads to focus and attention being on the wrong cyber risks. 

In this think tank session, Bruce will give an overview of applicable OT cyber security risk management frameworks including AS IEC 62443, Security PHA Reviews (SPR) and Consequence-Driven Cyber-Informed Engineering (CCE). The session will then close out with tips for running your cyber risk assessment. Additionally, Bruce will leave plenty of time for questions from the floor so attendees can ask questions about how their organisations manage OT cyber security risks.