Critical Infrastructure Risk Assessment: The Definitive Threat Identification and Threat Reduction Handbook

WHAT DEVASTATING THREATS DOES YOUR CRITICAL FACILITY FACE? WHAT CAN YOU DO TO ADDRESS THOSE RISKS?Critical Infrastructure Risk Assessment is your hands-on, step-by-step guide to understanding, prioritizing and mitigating risk. Ernie Hayden guides you with tools, examples, processes plus a real-world example risk assessment report. With Ernie’s guidance, your critical facility will be safer and more secure!You will learn what constitutes critical infrastructure and risk, and you will be guided in preparing, performing, and documenting a risk assessment of any complex facility.This handbook is for junior and senior personnel alike. Whether you’re a consultant, plant manager, corporate risk manager, engineer, or student, read this book before you jump into your first technical assignment!Critical Infrastructure Risk Assessment will guide you to:•Understand Risk, Risk Management, and Risk Assessment.•Navigate your Risk Assessment process from pre-visit through the final report.•Prepare for your site Risk Assessment.•Balance Risk Assessment activities including Observations and Inspections.•Weigh Critical, High, Medium, and Low Risk for your assessment findings.•Perform Interviews and Material Condition Inspections as part of the Risk Assessment Process.•Draw practical lessons from a real-world example risk assessment report.•Motivate and educate engineers on ways to perform large-facility risk assessments.•Capture your risk assessment findings and strengths in a realistic, usable risk assessment report.•Make decisions and do the right thing to conduct an effective Risk Assessment of any large, complex facility.

Ernie Hayden, MIPM, CISSP, CEH, GICSP(Gold), PSP, is a consultant, author, speaker, strategist, and thought leader with extensive experience in critical infrastructure protection/security, industrial controls security, cybercrime, cyberwarfare, and physical security. His focus is on risk assessments of industrial controls, energy supply, and chemical/oil/gas/electric grid security, with special expertise on CIP-014-2 - Physical Security of Substations, and risks of commercial drones to critical infrastructure. Ernie holds cyber and physical security certifications including CISSP - Certified Information Systems Security Professional; Certified Ethical Hacker (CEH); GICSP - SANS Global Industrial Cyber Security Professional (GICSP) with "Gold" designation; and, the ASIS Physical Security Professional (PSP) certification.