About the Author xiii
Foreword xv
Preface xix

Chapter 1 Industrial Automation and Control System Fundamental Concepts 1

Chapter 2 Information System Security Technology 29

Chapter 3 Industrial Automation and Control System Culture versus IT Paradigms 65

Chapter 4 The Continuing Technological Evolution Affecting IAC Systems 85

Chapter 5 Risk Management for Industrial Automation and Control Systems 115

Chapter 6 IAC Systems Security Methodologies and Approaches 147

Chapter 7 Industrial Automation and Control System Security Training 217

Chapter 8 Industrial Automation and Control System Trends, Approaches, and Issues 245

Chapter 9 Emerging Approaches to Industrial Automation and Control System Security 281

Appendix A Review Questions and Answers 333

Appendix B ICS Supplemental Guidance for NIST SP 800-53 Security Controls 409

Glossary and Acronyms 497
Bibliography 563
Index 569

Dr. Ronald L. Krutz is Chief Scientist for Security Risk Solutions, Inc. He has more than 30 years of experience in industrial automation and control systems, distributed computing systems, computer architectures, information assurance methodologies, and information security training. He has been a Senior Information Security Consultant at Lockheed Martin, BAE Systems, and REALTECH Systems Corporation, an Associate Director of the Carnegie Mellon Research Institute (CMRI), and a faculty member in the Carnegie Mellon University Department of Electrical and Computer Engineering. Dr. Krutz founded the CMRI Cyber Security Center and was founder and director of the CMRI Computer, Automation and Robotics Group. He was also a lead instructor for (ISC)2 Inc. in its Certified Information Systems Security Professionals (CISSP) training seminars.
He coauthored the CISSP Prep Guide for John Wiley and Sons and is coauthor of the Wiley Advanced CISSP Prep Guide; the CISSP Prep Guide, Gold Edition; the Security + Certification Guide; the CISM Prep Guide; the CISSP Prep Guide: Mastering CISSP and ISSEP (Information Systems Security Engineering Professional), Second Edition; the Network Security Bible; the CISSP and CAP (Certification and Accreditation Professional) Prep Guide, Platinum Edition: Mastering CISSP and CAP; the Certified Ethical Hacker (CEH) Prep Guide; Cloud Computing Security; and Web Commerce Security. He is also the author of Securing SCADA Systems and of three textbooks in the areas of microcomputer system design, computer interfacing, and computer architecture. Dr. Krutz has seven patents in the area of digital systems and has published more than 30 technical papers. Dr. Krutz is also a Senior Fellow of the International Cyber Center of George Mason University. Dr. Krutz holds BS, MS, and PhD degrees in Electrical and Computer Engineering, is a Registered Professional Engineer in Pennsylvania, and is a Senior Life Member of the IEEE.

R. L. Krutz, Carnegie-Mellon University, Huntingdon, PA