Cybersecurity management has become a business imperative for organizations across many industries. The first attempt can result in mounds of unruly and often unhelpful paperwork. This problem can be emphasized by identifying the correct location of cybersecurity requirements: Is the correct file for documenting the firewall rules, the firewall policy overview, firewall installation procedure, the access control philosophy, the system zone & conduit diagram, or some combination of all the above?
With a Cybersecurity Management System (CSMS), one central document outlines the “what” an organization aims to achieve for cybersecurity and provides clear direction on where to find the procedures that outline the “how” for a given security task, leading to effective cybersecurity management and fewer headaches.
Patrick O’Brien is a Safety and Cybersecurity Engineer at exida LLC, where he performs numerous end user focused training, consulting, and support services for industrial facilities in functional safety and cybersecurity. In addition to his consulting work, he has assisted with product development through testing, application specification, and the creation of user tutorials for the exSILentia® software platform, including significant work with the exida CyberPHAx™ and CyberSL tools. He has assisted with the development of exida training material and other knowledge-based content. He also helped develop cybersecurity projects through technical support and the translation of cybersecurity documents between English and German. Mr. O’Brien recently graduated from the Pennsylvania State University with a Bachelor of Science in Chemical Engineering and a Bachelor of Science in German Language and Culture.