Honeywell International Inc.

Sinclair Koelemij

Eric D Knapp

Sema Tutucu

A method includes providing a cybersecurity risk model for cybersecurity and process risk modeling of assets in an industrial control system (ICS) including process controllers connected together by a communications network coupled by I/O devices to field devices coupled to processing equipment. The assets are configured together to implement a process. The risk model processes input data including event path data including event paths leading to a cybersecurity hazard and ≥1 process hazard, exposure data for the cybersecurity and process hazard, and consequence data for the cybersecurity and the process hazard including a severity of failure, the risk model outputting functional consequences of failure of the cybersecurity and the process hazard, and a likelihood of failure for the hazards. A risk analysis engine processes the functional consequences and likelihood of failures for the cybersecurity and process hazard, and generates outputs including a quantified risk for the cybersecurity and process hazard.

Cybersecurity hazard analysis tool

This disclosure provides systems and methods for tying cyber-security risk analysis to common risk methodologies and risk levels. A method includes identifying a plurality of connected devices that are vulnerable to cyber-security risks and identifying cyber-security risks in the connected devices. The method includes assigning a risk level to each of the risks and comparing the risk levels to a first threshold and to a second threshold. The method includes assigning each identified cyber-security risk to a risk classification and displaying a user interface that includes a notification according to the identified cyber-security risks and the corresponding assigned risk classifications.

Apparatus and method for tying cyber-security risk analysis to common risk methodologies and risk levels

A method includes identifying multiple devices or groups of devices in an industrial process control and automation system. The method also includes, for each device or group of devices, (i) obtaining impact values identifying potential effects of a failure or compromise of the device or group of devices due to one or more cyber-security risks and (ii) identifying a consequence value using the impact values. Multiple impact values associated with different categories of potential effects are obtained, and the consequence value identifies an overall effect of the failure or compromise of the device or group of devices.

Growing community of inventors

Velsen-Zuid, Netherlands

Sinclair Koelemij