GovWare Conference 2021 Full Agenda


Studying Cyber Physical Risk and Controls Through C-PHA

06 Oct 2021
Industrial Controls Systems (ICS): Vulnerabilities & Resiliency

With increasing threats to Operational Technology (OT) cybersecurity, the presentation will focus on the need to consider cybersecurity in process safety. This will be of interest to industrial control system (ICS) owners in the Energy and Natural Resources sector, manufacturing sector and other critical infrastructure. Cyber Process Hazard Analysis (C-PHA) can be conducted to analyze the risks. Cyber Hazard and Operability (CHAZOP) method is commonly used and we will walkthrough an example. Other methods that will that we will walk through are the fault tree analysis and bow tie analysis methods.

Finally we will share on the concept of graceful degradation.

The presentation is based on our thought leadership article published on 8 June 2021 titled, "Cyber-physical attacks on critical infrastructure: KPMG's viewpoint How to identify threats, plug security gaps and avoid next shutdown for oil and gas, power plants and industrial facilities". Read more here,

Matthew Loong, Associate Director - KPMG