2025-08-10 Mounting OT cyber risks demand stronger cyber-physical security to protect legacy systems and operational continuity

[ahouseholder]

https://industrialcyber.co/features/mounting-ot-cyber-risks-demand-stronger-cyber-physical-security-to-protect-legacy-systems-and-operational-continuity/

Valencia identified that vulnerability and risk quantification means going from the component level to the system and ecosystem level. He also cited the ‘ICS Advisory Project,’ which shows the same vulnerabilities per operating system and industrial manufacturer. “The former will tell data about the CVSS (analysts) and EPSS (exploit predictability), but the latter will tell industrial owners about the process impact and even the suppliers involved.”

He noted that to bridge these perspectives, methodologies like SSVC (Stakeholder-Specific Vulnerability Categorization) should be promoted, as they help align technical risk assessments with stakeholder-specific priorities and operational realities.