15 Questions to ask your IACS risk assessment vendor or team

Will your assessment require any part of the plant to be shut down or rendered inoperative? 1

2

[{"selector":"#anim-8a4c14e5-526f-46d5-8f36-9539024fed76","keyframes":{"opacity":[0,1]},"delay":0,"duration":3000,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-4980aa8a-d31d-42cc-bc10-63a8375daa88","keyframes":{"opacity":[0,1]},"delay":150,"duration":3000,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}]

How will your tools read unique protocols that my devices use? 3

4

[{"selector":"#anim-78016240-cb0b-4a7c-9f76-597f26cd20ec","keyframes":{"opacity":[0,1]},"delay":0,"duration":3000,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-6de3a986-ae03-4ce0-8224-5436a84413d9","keyframes":{"opacity":[0,1]},"delay":150,"duration":3000,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}]

Will the business impact be considered as a factor while delineating SUCs? 5

6

[{"selector":"#anim-2e0fbea2-64a9-4c8f-b223-0f12fc98190c","keyframes":{"opacity":[0,1]},"delay":0,"duration":3000,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-3391e1f6-3c87-4722-bf03-a947639fb829","keyframes":{"opacity":[0,1]},"delay":150,"duration":3000,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}]

Find out how Sectrio can help you with your OT/ICS and IoT Cybersecurity needs and requirements

Will you also be looking at aspects such as firewall configuration? 7

8

[{"selector":"#anim-1e57d53f-4386-4ea6-9997-5bf10ee6f55a","keyframes":{"opacity":[0,1]},"delay":0,"duration":3000,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-2e63f34f-c2ea-48f1-8698-2bcb58fbc3aa","keyframes":{"opacity":[0,1]},"delay":150,"duration":3000,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}]

How will the interviews be conducted? How will the responses be evaluated? 9

10

[{"selector":"#anim-aa2a2469-2d8b-41d8-bdd2-f50a7cd59962","keyframes":{"opacity":[0,1]},"delay":0,"duration":3000,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-236ec1fa-77ba-49ed-8081-6953df78b653","keyframes":{"opacity":[0,1]},"delay":150,"duration":3000,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}]

How is the cybersecurity maturity score derived? 11

12

[{"selector":"#anim-e26253ec-f0bd-42c3-8d36-a792ed92fca1","keyframes":{"opacity":[0,1]},"delay":0,"duration":3000,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-3c8f9eee-810e-4db1-a889-b41078af9576","keyframes":{"opacity":[0,1]},"delay":150,"duration":3000,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}]

How will device-level issues be identified? 13

14

[{"selector":"#anim-b6f869c6-9f83-4895-83d7-01b003169370","keyframes":{"opacity":[0,1]},"delay":0,"duration":3000,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-08e1cb7c-a257-434d-abc6-829e1b8ea2e9","keyframes":{"opacity":[0,1]},"delay":150,"duration":3000,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}]

What will be the nature of the recommendations shared? 15

Other stories

[{"selector":"#anim-d41e88f6-8b74-40eb-85ee-e7ebe4b7d94a","keyframes":{"opacity":[0,1]},"delay":0,"duration":2000,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] [{"selector":"#anim-735fc5bd-c4bb-4f99-bb93-6e778abc1a7f","keyframes":{"transform":["translate3d(-140.00002%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] [{"selector":"#anim-b6cc106d-4f9d-46a4-9178-cb525cb08876","keyframes":{"opacity":[0,1]},"delay":100,"duration":2000,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] [{"selector":"#anim-cef659a0-89bf-42ca-9f4e-c57b8b1ba81e","keyframes":{"transform":["translate3d(150.00002%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":100,"duration":2000,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] [{"selector":"#anim-6f269f81-bcc1-414c-9cff-1172fb5c58ef","keyframes":{"opacity":[0,1]},"delay":50,"duration":2000,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] [{"selector":"#anim-4df40c30-958c-48d8-a0b9-d511db7f94ad","keyframes":{"transform":["translate3d(-140.33614%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":50,"duration":2000,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] [{"selector":"#anim-bb0d0de1-f74e-4c36-9449-0bf72fa4edaf","keyframes":{"opacity":[0,1]},"delay":100,"duration":2000,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] [{"selector":"#anim-8536cd60-0cb1-44a4-aa56-af32c280f72c","keyframes":{"transform":["translate3d(-147.52478%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":100,"duration":2000,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] [{"selector":"#anim-b9b14fbc-d3cc-4e75-9f07-ecc271e597ab","keyframes":{"opacity":[0,1]},"delay":150,"duration":2000,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] [{"selector":"#anim-cbfbeab0-9501-420f-b7d5-8431a50c75ca","keyframes":{"transform":["translate3d(163.96396%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":150,"duration":2000,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] [{"selector":"#anim-62591073-3ef6-4236-8b3b-02dd5dfc223a","keyframes":{"opacity":[0,1]},"delay":150,"duration":2000,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] [{"selector":"#anim-1a4d2791-2639-4aa2-85cc-809dd6ad21e3","keyframes":{"transform":["translate3d(159.64915%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":150,"duration":2000,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] Know everything about 'Operation Cronos' Get the latest and the most important updates Sectrio Blogs

15 Questions to ask your IACS risk assessment vendor or team

2

How will you ensure that the p-caps are handled securely?

4

If any severe vulnerabilities are discovered? Then what will be the next steps? Can you help us address them?

6

What is your assessment framework and what is it that you will be looking for in our networks?

Find out how Sectrio can help you with your OT/ICS and IoT Cybersecurity needs and requirements

8

How will you assess threats in an air-gapped environment?

10

How do you calculate the risk score of a security issue?

12

What industrial standards will be considered?

14

What will be the next steps after the assessment? When will the report be shared?

Other stories

LockBit Down

Sectrio Blogs