Hear a case study conducted by a major department of transportation to assess the cyber security of their traffic management centers [TMC]. These centers operate a number of field devices [traffic signals, variable message signs, weather stations, pavement sensors, video cameras, etc.] across a distributed communications network that can present cyber security vulnerabilities. The NIST cyber security framework [CSF] was customized and used to assess both informational and operational technologies [IT and OT] present in the TMC. It also included a high-level assessment of the systems used to communicate with these field devices. The results are presented using the DHS CISA recommended Cyber Security Performance Goals [CPG] format.

This will be a timely, practical presentation of how to actually conduct a cyber assessment using the NIST CSF and DHS CPG guidance.