A new tool has been released from Admeritia that is intended to assist organizations in making complex cybersecurity decisions related to industrial control systems ( ICS) and other operational technology ( OT ).
The newly launched tool, named ( CDD), is available for free as a web-based application. Users of the device can make straightforward diagrams to help them connect their ideas and decisions about security.  ,
Admeritia, a Germany-based ICS/OT security company, says it does not monitor or keep any information provided by the user to produce the diagrams. Downloadable PDF files are available.
The customer is guided through five steps by the application. In the first step, the user is asked to define a high-consequence event ( HCE), which represents the worst case scenario that a cyberattack can cause to the business, such as a furnace exploding, a power outage, a customer data hole, loss of creation, or inadequate product quality.  ,
The person is then instructed to create a real-world outlet that represents the most closely related cybersystem to the HCE. This can be a system such as an IT buyer, a industry device, a SCADA program, or a controller.  ,
Save the day:
Next, the user is asked to make work adjustments — include other important elements, including other systems, as well as roles such as service provider, operator, user, supplier and engineer.  ,
The customer determines the assault path at the third step, which is the most efficient way to abuse the elements that have already been added to the HCE.  ,
Eventually, the user is asked to choose security requirements, the bottom five elements that may prevent or alleviate the HCE.
The application can be used to create an “engineering chart for security decisions,” according to Sarah Fluchs, CTO of Admeritia and creator of Cyber Decision Diagrams, to aid security team in seeing crucial decisions more plainly and grounded them in the real world.
The creation of the Cyber Decision Diagrams tool took only a few months. But the idea behind it took eight years, countless cybersecurity engineering projects across industries, a three-year research project and a PhD”, Fluchs .
Admeritia also has a commercial version of the tool called Security Engineering Tool ( SET ), which is free of charge.  ,
Related:
Related: Asset Vulnerability Framework for OT Compensating Scoring
Related: