Cyber Risk Assessment Model for Critical Information Infrastructure

In the age of digitalization, each utility has developed its technology roadmap for implementing Information and Operational Technologies. The technology deployment demands infrastructure which comprises securing interacting digital, analog, physical, and human components amalgamated for functioning in an integrated manner (E.g. ADMS/ SCADA, Smart Meters, Field Force Automation devices, etc. Cyber-Physical Security (CPS) of these critical infrastructures is of profound significance for the reliable operations of a utility. Potential threat vectors in such an environment enforce the organization to adopt a proactive approach to develop cybersecurity practices within the organization. Due to these factors, utilities are required to establish the cybersecurity Risk Assessment Model which shall be the building block for the implementation of Secure Critical Information Infrastructure (CII). The model developed shall include the concept of regression analysis with an input of predefined and approved specification limits to ensure that cyber risks associated with each CII are within the organization defined limits. This algorithm shall also predict the capability of the risk assessment process, hence empowering a utility to take proactive security measures to ensure risk is mitigated and desired security is achieved.