control, education training, threat detection, etc are all things that need to be taken under<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n
\n
\n
\n
\n
consideration when addressing these critical needs.<\/span>
After identifying the critical need of the organization it will help to narrow down how to<\/span>
distribute the budget and whether or not to focus more on investing in traditional cyber tech to<\/span>
benefit the company or focus on training programs to help develop the skill of employees.<\/span><\/div>\n<\/div>\n
Human Error<\/span>
Cybercriminals often target human vulnerabilities for cyber attacks, data breaches, etc. When we<\/span>
make errors it directly contributes to risk that makes these cyber attacks easier. To prevent this I<\/span>
would focus on managing my budget so that more money is spent towards mitigating human eros<\/span>
in turn leading to less cyber attacks. By investing in training programs for employees it can allow<\/span>
for them to become more educated on cyber security in turn leading to a safer and more secure<\/span>
company.<\/span><\/div>\n<\/div>\n
Adjust and Improve<\/span>
After figuring out the strengths and weaknesses of the company, seeing the critical needs of the<\/span>
company, and prioritizing reducing human error, I would then look to continue to adjust and<\/span>
improve the organization with the remaining budget.<\/span>
Although most of the funds went toward human errors, finding cost effective cyber tech can help<\/span>
to provide a strong security without needing the extra money. Also seeing that cybersecurity in a<\/span><\/p>\nlong term process and not a one time investment is crucial. Using funds to continue the<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n
\n
\n
\n
\n
development of staff and tech is a necessity to fight against the ever changing cyber attacks.<\/span>
CISO is a hard task and not knowing the basic cybersecurity practices and functions could lead<\/span>
to the downfall of a company. When managing a budget between training and tech it is important<\/span>
to know what the company does well in and what it needs to improve on. After finding that out<\/span>
you are able to make decisions on how to spend your budget and know which is more beneficial<\/span>
to the company.<\/span><\/p>\n<\/div>\n
Write up 2- How SCADA Systems Protect from Vulnerabilities<\/p>\n
\n
\n
\n
\n
There are many vulnerabilities that can have a negative effect on critical infrastructure systems<\/span>
such as failure to identify and protect a security perimeter, cyber attacks, unauthorized access,<\/span>
etc. Because of this, there are systems put in place to help mitigate these threats such as the<\/span>
Supervisory Control and Data Acquisition, also known as SCADA. SCADA systems are effective<\/span>
in mitigating these vulnerabilities because they provide access control and authentication,<\/span>
firewalls, endpoint protection, etc.<\/span><\/div>\n<\/div>\n
Critical Infrastructure<\/span><\/div>\nCritical Infrastructure are the systems, facilities, and assets that are necessary for the economy<\/span>
and society. These systems are so important because they help to manage public safety, health,<\/span>
and the economy. Because critical infrastructure is so vital for society and the economy, <\/span>countries must follow strict rules and regulations when managing it. It’s important for those who <\/span>manage critical infrastructure to be up to date and the pest practices and regulations to keep the<\/span>
necessary security for these systems.<\/span><\/div>\n<\/div>\n
Vulnerabilities<\/span>
Since critical infrastructure systems play a crucial role in our society, they are also a primary<\/span>
target for attacking. Some vulnerabilities related to the system include cyber attacks, outdated<\/span>
tech, and security.<\/span><\/p>\nBecause of our human advancements and us relying on tech, infrastructure systems are more<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n
\n
\n
\n
\n
vulnerable to cyber-attacks. Attackers can find problems within the network, software or<\/span>
hardware to disrupt these systems and steal sensitive information causing even more damage.<\/span>
Cyber-attacks on infrastructure systems can also lead to huge financial losses. Because of the<\/span>
attacks the systems have to pay repair costs and any other factors that contributed to loss of<\/span>
revenue.<\/span>
Systems with outdated tech may be more likely to suffer from hardware glitches, software.<\/span>
failures and performance issues. Because of this service downtime or interruptions within the<\/span>
systems can arise causing problems for the system. Another problem that arises with outdated<\/span>
tech is that those systems may not be compatible with modern systems making it more difficult<\/span>
to integrate with newer infrastructure systems. Outdated technology can interfere with <\/span>advancement and the adoption of emerging technologies that could strengthen critical <\/span>infrastructure systems. Because of this organizations may struggle to adapt to evolving threats <\/span>and operational challenges.<\/span>
Security plays a crucial role in ensuring the protection of infrastructure systems. If an<\/span>
infrastructure system has poor security then it is more likely to cyber attacks and stolen<\/span>
information. Another problem that arises with poor security is that it can lead to a loss in public<\/span>
trust. If a system is constantly getting hit with cyber threats or attacks then the public will lose<\/span>
trust in that service. By implementing a good security system it will help to negate these<\/span>
problems and allow for an improved system.<\/span><\/p>\n<\/div>\n<\/div>\n<\/div>\n
SCADA Systems<\/div>\n<\/div>\n<\/div>\n<\/div>\n
\n
\n
\n
\n
Supervisory Control and Data Acquisition or SCADA refers to the systems that look over and<\/span>
control the entirety of a site. \u201cNearly all the control actions are automatically performed by the<\/span>
remote terminal units (RTUs) or by the programmable logic controllers (PLCs).\u201d (SCADA<\/span>
Systems pg1). The host has control over functions for usage of intervention or overriding. Data is<\/span>
accumulated at PLC\/RTU level and from there the operator in the control room can then make<\/span>
changes to the PLC\/RTU controls via HMI. <\/span>\u201cThe HMI, or Human Machine Interface, is an apparatus that gives the processed data to the <\/span>human operator. A human operator uses HMI to control processes.\u201d (SCADA Systems pg 2) , <\/span>meaning that once the processed data is in the hands of the operator they can then use the HMI to <\/span>make changes as they see fit. The HMI helps to provide diagnostics of data, management <\/span>information, trending information, detailed schematics, etc.<\/span>
SCADA systems can be very beneficial systems as they are helpful in protecting critical <\/span>infrastructure systems which are essential for society.<\/span><\/div>\n<\/div>\n
Mitigating Vulnerabilities<\/span>
SCADA does well to mitigate threats related to critical infrastructure systems because they<\/span>
demonstrate good control, management and monitoring capabilities. For example SCADA<\/span>
systems use master stations. \u201cMaster stations can have multiple servers, disaster recovery sites,<\/span>
and distributed software applications in larger SCADA systems. For increasing the system<\/span>
integrity, multiple servers are occasionally configured in hot-standby or dual-redundant<\/span>
formation, providing monitoring and continuous control during server failures.\u201d(SCADA<\/span>
Systems pg 4), thus showing how the system can be in constant watch of cyber attacks and even <\/span>if the attack is to work the system has recovery sites to minimize the damage. No matter what<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n\n
\n
\n
\n
threat is thrown their way the SCADA can be in control of everything. Scada systems also<\/span>
implement advanced security systems such as encryption protocols, authentication mechanisms,<\/span>
intrusion detection systems, etc. SCADA systems help to mitigate the threats of cyber attack<\/span>
because of how secure it is. Scada systems are also not outdated, \u201cSCADA systems are now in<\/span>
line with the standard networking technologies. The old proprietary standards are being replaced<\/span>
by the TCP\/IP and Ethernet protocols.\u201d(SCADA Systems pg 4), with SCADA systems being up<\/span>
to date it has better system performance and is less prone to downtime or server interruptions.<\/span>
Scada systems are used by organizations to allow them to be as efficient as possible. Theft is a<\/span>
very useful tool for protecting against vulnerabilities to infrastructure systems. Because of all the<\/span>
time and effort that was put into the development of these systems they are effective in having<\/span>
reliable security, protecting against cyber attacks, managing data, communication, etc. All the<\/span>
factors are contributors to the Scada system’s success.<\/span><\/div>\nDiscussion Board Post- In this discussion board, you are the CISO for a publicly traded company. What protections would you implement to ensure availability of your systems?<\/div>\n<\/div>\n
<\/div>\n
Some protections I would implement to ensure availability of my systems is ddos protection and also backup systems. Since ddos attacks lead to service outages implementing this protection system will lead to our services still being available even under an attack. Having backup systems in a secure location will lead to restoring systems quickly in the event that there is a system failure.<\/div>\n
<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n
<\/div>\n
<\/div>\n<\/div>\n
<\/div>\n<\/div>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"
Cybersecurity, Technology, and Society Students in\u00a0IT\/CYSE 200T\u00a0will explore how technology is related to cybersecurity from an interdisciplinary orientation.\u00a0 Attention is given to the way that technologically-driven cybersecurity issues are connected to cultural, political, legal, ethical, and business domains. The learning outcomes for this course are as follows: Describe how cyber technology creates opportunities for criminal… <\/p>\n
Read More<\/a><\/div>\n","protected":false},"author":28665,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"_links":{"self":[{"href":"https:\/\/sites.wp.odu.edu\/vsmith05\/wp-json\/wp\/v2\/pages\/133"}],"collection":[{"href":"https:\/\/sites.wp.odu.edu\/vsmith05\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/sites.wp.odu.edu\/vsmith05\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/sites.wp.odu.edu\/vsmith05\/wp-json\/wp\/v2\/users\/28665"}],"replies":[{"embeddable":true,"href":"https:\/\/sites.wp.odu.edu\/vsmith05\/wp-json\/wp\/v2\/comments?post=133"}],"version-history":[{"count":5,"href":"https:\/\/sites.wp.odu.edu\/vsmith05\/wp-json\/wp\/v2\/pages\/133\/revisions"}],"predecessor-version":[{"id":307,"href":"https:\/\/sites.wp.odu.edu\/vsmith05\/wp-json\/wp\/v2\/pages\/133\/revisions\/307"}],"wp:attachment":[{"href":"https:\/\/sites.wp.odu.edu\/vsmith05\/wp-json\/wp\/v2\/media?parent=133"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}