Conflicts

From Open SCADA Security Project

Schools of thought differ between IT and engineering. This page is intended to provide some resolutions to these conflicts.

Control engineers tend to focus on risk analysis early and take a more conservative approach to change. Where IT focused professionals identify vulnerabilities that could be exploited by an attacker whilst the risk analysis is taking place.

[edit] IT vs Control Systems

[edit] Principles

Guiding vs Specific

[edit] Speed of Change

Typically, SCADA systems have taken longer to change. Sophistication of threats are constantly growing.

[edit] Common Complaints

Both sides claim the other lacks an understanding of the risks.