EXPOSURE MANAGEMENT FOR CYBER-PHYSICAL SYSTEMS

In order to keep up with the continuous pace of digital transformation, manufacturing, healthcare, and other critical infrastructure organizations must evolve beyond traditional vulnerability management for their cyber-physical systems (CPS) and create a broader and more dynamic program for managing their overall exposure to risk.

Exposure Management Gartner^® defines Continuous Threat Exposure Management (CTEM) as “a set of processes and capabilities that allow enterprises to continually and consistently evaluate the accessibility, exposure and exploitability of an enterprise’s digital and physical assets.” Per Gartner, “At any stage of maturity, a CTEM cycle must include five steps to be completed: scoping, discovery, prioritization, validation and mobilization. Organizations building a CTEM program use tools to inventory and categorize assets and vulnerabilities, simulate or test attack scenarios and other forms of posture assessment processes and technologies. It is important that a CTEM program has an effective and actionable path for infrastructure teams, system and project owners to take action on findings.