Industrial Cyber Security is a Critical Precondition to Operation Safety
The risk of cyber–attacks against industrial plants is growing at an unprecedented rate. The PPT (People, Procedures, Technologies) and the RDC (Redundancy, Diversity, Complexity) triads serve as umbrellas for all defense methods and practices, but is that enough? Among the recently published cybersecurity incidents, you will find attacks that do not directly affect the industrial process and those that directly cause operational outages, damage, and risking lives. Process-related plants are controlled by Industrial Control Systems (ICS), which must be designed with safety, cybersecurity, and reliability in mind to ensure business continuity, rapid incident response, and effective recovery procedures. The goal of this paper is to introduce a practical approach to industrial cyber defense through the VLR (Vulnerability, Likelihood, Risk) triad. This triad does not replace the other approaches but rather serves as an additional and powerful method.