Design and Operation Framework for Industrial Control System Security Exercise

In recent years, cyber-attacks on critical infrastructures have become a threat to reality. Incidents of cyber-attacks happen in the ICS (industrial control system) on site. As countermeasures against cyber-attacks, companies need not only consider stable plant operation from the viewpoint of safety but also consider business continuity from the business point of view. To promptly take the above countermeasures against cyber-attacks, companies have to prepare corporate resources in advance and educate their staffs and operators using the training exercise. In this paper, the authors propose a design framework of the exercise based on existing safety-BCP and IT-BCP. An illustrative example exercise is presented to easily understand the proposed methodologies.