https://us-cert.cisa.gov/ics/Recommended-Practices
Threat (capability + opportunity + intent) x Vulnerability x Consequence = Risk
Risk Curve
Loss of View, Loss of Control
Field controllers are responsible for collecting, assessing, and processing the information collected from field devices and interfacing with the HMI.
GitHub - cisagov/cset: Cybersecurity Evaluation Tool
https://github.com/cisagov/cset
