2020 Virtual AIChE Annual Meeting
(14f) Keynote: Integrating Cybersecurity into PHA and PSM
As operational and information technologies converge to allow for remote and real-time access to plant operating data and control functions, the process industry could become increasingly susceptible to cyber-attacks. Traditional hazard and risk analysis methods appear inadequate to identify, prevent, and mitigate such attacks. As plant technologies evolve, such analysis methods should also be updated to address new and heightened risks of cyber-attacks on critical systems. Integrating cybersecurity into hazard and risk analyses as well as other elements of process safety management (PSM) could be done at an early design stage of a new plant, such as through Prevention through Design or Inherently Safe Design practices. It could also be applied throughout the life of a facility such as part of design/safety reviews to support operations/maintenance or for a capital expansion/ retrofit project. As anonymous adversaries could attack at any place or time, one must stay vigilant and implement a holistic approach to enhance awareness and capabilities to defend against and recover from cyber-attacks throughout the life cycle of a plant.
https://www.sciencedirect.com/science/article/pii/S0950423019307995