A critical review of cyber security and cyber terrorism - threats to critical infrastructure in the energy sector

2018 ◽  
Vol 14 (2) ◽  
pp. 101
Author(s):  
Ravi Samikannu ◽  
Venkatachary Sampath Kumar ◽  
Jagdish Prasad
Keyword(s):  
Cyber Security ◽  
Critical Review ◽  
Critical Infrastructure ◽  
Energy Sector ◽  
Cyber Terrorism

scholarly journals MATURITY MODEL OF CYBER SECURITY SYSTEM OPPORTUNITIES AT CRITICAL INFRASTRUCTURE FACILITIES OF THE ES-C2M2 ENERGY SECTOR

2020 ◽  
Vol 2 (10) ◽  
pp. 67-74
Author(s):  
Yanina Roy ◽  
Olena Riabchun ◽  
Valeriy Yermoshin
Keyword(s):  
Cyber Security ◽  
Oil And Gas ◽  
Model Building ◽  
Critical Infrastructure ◽  
Energy Sector ◽  
International Standards ◽  
Large Set ◽  
Maturity Model ◽  
Government Organizations ◽  
Capability Maturity

Currently, a large set of IS maturity assessment models based on similar principles is available for both commercial and government organizations and institutions. At the same time, the actual use of such models is quite limited, primarily due to the weak attachment to the characteristics of specific organizations. This problem is partially solved by adapting existing approaches in the form of industry models (for example, ES-C2M2 for companies in the energy sector, ONG-C2M2 for companies in the oil and gas sector). Moreover, the emergence of a new model is very likely, which includes not only qualitative analysis through a set of characteristics / domains, but also a quantitative assessment of cybersecurity, which will use the assessment for both strategic and operational planning, as well as create an advanced expert analytical system . The best solution today is to start implementing any of the existing evaluation models with further adaptation and expansion for your own needs. Similar principles of model building will allow in the future to migrate painlessly to a more appropriate, while the experience gained in the assessment, as well as statistics will judge the progress of IS processes in the enterprise, and, importantly, in a convenient and understandable for senior management. The ES-C2M2 Cyber ​​Security Maturity Model can significantly help energy sector organizations to assess and improve their cybersecurity areas. The ES-C2M2 Capability Maturity Model is part of the DOE Cybersecurity Capability Maturity Program (C2M2) and was developed to address the unique characteristics of the energy subsector. The opportunity maturity model is a tool for self-assessment to measure and improve their cybersecurity areas. International standards and practices in the field of information security recommend that organizations when planning IS activities to assess the current state of IS and set a target for the near future, the achievement of which will allow the company to effectively address existing threats and respond to new challenges and threats of IS.

The Cyberspace Threats and Cyber Security Objectives in the Cyber Security Strategies

2013 ◽  
Vol 3 (3) ◽  
pp. 1-18 ◽  
Author(s):  
Martti Lehto
Keyword(s):  
Cyber Security ◽  
Security Policy ◽  
Critical Infrastructure ◽  
The United States ◽  
Substantial Contribution ◽  
Security Threats ◽  
Cyber Warfare ◽  
Security Strategy ◽  
Cyber Terrorism ◽  
Cyber Espionage

Threats in cyberspace can be classified in many ways. This is evident when you look at cyber security on a multinational level. One of the most common models is a threefold classification based on motivational factors. Most nations use this model as a foundation when creating a strategy to handle cyber security threats as it pertains to them. This paper will use the five level model: cyber activism, cybercrime, cyber espionage, cyber terrorism and cyber warfare. The National Cyber Security Strategy defines articulates the overall aim and objectives of the nation's cyber security policy and sets out the strategic priorities that the national government will pursue to achieve these objectives. The Cyber Security Strategy also describes the key objectives that will be undertaken through a comprehensive body of work across the nation to achieve these strategic priorities. Cyberspace underpins almost every facet of the national functions vital to society and provides critical support for areas like critical infrastructure, economy, public safety, and national security. National governments aim at making a substantial contribution to secure cyberspace and they have different focus areas in the cyber ecosystem. In this context the level of cyber security reached is the sum of all national and international measures taken to protect all activities in the cyber ecosystem. This paper will analyze the cyber security threats, vulnerabilities and cyber weaponry and the cyber security objectives of the Cyber Security Strategies made by Australia, Canada, Czech Republic, Estonia, Finland, Germany, the Netherlands, the United Kingdom and the United States.

scholarly journals Cyber-risk management: identification, prevention, and mitigation techniques

2021 ◽  
Author(s):  
Naveen Kunnathuvalappil Hariharan
Keyword(s):  
Risk Management ◽  
Cyber Security ◽  
Critical Infrastructure ◽  
Identity Theft ◽  
Cyber Attacks ◽  
Cyber Terrorism ◽  
Mitigation Techniques ◽  
Cyber Risk ◽  
Careful Management

Cyber-attacks on critical infrastructure, as well as the possibility of cyber-terrorism and even cyberwarfare, pose a threat to societies on a larger scale. Stakeholders are vulnerable to information theft,service disruptions, privacy and identity theft, fraud, espionage and sabotage. This article provides abrief overview of risk management, with a particular emphasis on cyber security and cyber-riskassessment. This article provides an overview of risk management, with a particular emphasis oncyber security detection, prevention, and mitigation techniques. We showed how organizations couldmitigate their cyber risk with careful management.

scholarly journals Cybersecurity Policy and the Legislative Context of the Water and Wastewater Sector in South Africa

2020 ◽  
Vol 13 (1) ◽  
pp. 291
Author(s):  
Masike Malatji ◽  
Annlizé L. Marnewick ◽  
Suné von Solms
Keyword(s):  
South Africa ◽  
Computer Security ◽  
Critical Infrastructure ◽  
Policy Framework ◽  
Economic Sectors ◽  
Cyber Terrorism ◽  
Electronic Communications ◽  
Response Team ◽  
Water And Wastewater ◽  
Security Incidents

The water and wastewater sector is an important lifeline upon which other economic sectors depend. Securing the sector’s critical infrastructure is therefore important for any country’s economy. Like many other nations, South Africa has an overarching national cybersecurity strategy aimed at addressing cyber terrorism, cybercriminal activities, cyber vandalism, and cyber sabotage. The aim of this study is to contextualise the water and wastewater sector’s cybersecurity responsibilities within the national cybersecurity legislative and policy environment. This is achieved by conducting a detailed analysis of the international, national and sector cybersecurity stakeholders; legislation and policies; and challenges pertaining to the protection of the water and wastewater sector. The study found some concerning challenges and improvement gaps regarding the complex manner in which the national government is implementing the cybersecurity strategy. The study also found that, along with the National Cybersecurity Policy Framework (the national cybersecurity strategy of South Africa), the Electronic Communications and Transactions Act, Critical Infrastructure Protection Act, and other supporting legislation and policies make provision for the water and wastewater sector’s computer security incidents response team to be established without the need to propose any new laws or amend existing ones. This is conducive for the immediate development of the sector-specific cybersecurity governance framework and resilience strategy to protect the water and wastewater assets.

Sign in / Sign up

Export Citation Format

Share Document