Description

• Roles and Responsibilities:
  • Conduct periodic and ad hoc cybersecurity risk assessments across IT and OT environments
  • Perform OT-specific risk assessments on assets such as PLCs, HMIs, RTUs, and engineering systems
  • Identify and document OT-relevant risk scenarios (e.g., control system disruption, unauthorized access, safety manipulation)
  • Coordinate risk reviews as part of major IT/OT changes, such as system upgrades or new deployments
  • Reassess risk posture following major changes, incidents, or regulatory updates
  • Review and validate existing controls to calculate residual risk and prioritize treatment actions