Title: Perform a risk assessment.
Course: Cybersecurity in Manufacturing, Advanced (13002-IV) > Section: Evaluating Vulnerabilities, Risks, and Threats in Manufacturing Systems

Performance includes identifying risks within an ICS. Performance should consider the effects of unmitigated risks (e.g., system downtime and financial effects).

Teacher Resources:

- Guide for Conducting Risk Assessments (NIST SP 800-30) (https://csrc.nist.gov/publications/detail/sp/800-30/rev-1/final)
- Managing Information Security Risk: Organization, Mission, and Information System View (NIST SP 800-39) (https://csrc.nist.gov/publications/detail/sp/800-39/final)
- The factor analysis information risk (FAIR) Institute (https://www.fairinstitute.org/)

Process/Skill Questions:

- Why is system downtime detrimental?
- Why are risk assessments important? What resources may assist with a risk assessment?
- Who should be involved in a risk assessment?