Readings
This week’s chapters and white paper will provide you with a baseline and understanding of Network and ICS (Industry Control Systems) Security. Please pay attention to the different definitions and terminology that will be used throughout the course. This week is intended for you to refresh your memory on these terms and definitions. The quiz and activities will rely on an understanding of this information.
• Chapter 1 of Security Engineering Links to an external site., Ross Anderson
o In this chapter you will read about the fundamental concepts in network security, including identification of common vulnerabilities and threats, and mitigation strategies.
• Chapter 1 of Industrial Cybersecurity Links to an external site., Pascal Ackerman
o This reading will provide you with an overview of an industrial control system (ICS) and show you some good examples of an industrial control system network architecture. You learned some of the common communication protocols used in ICS systems today.
• Framework for Improving Critical Infrastructure Cybersecurity v1.1 pdf Links to an external site. (Pages 1-55)
o This document is the current version of the Framework for cybersecurity and improving network security in critical infrastructure. This reading will lay some of the groundwork related to the projects and assignments of the course.
• NIST SP 800-50, Building an Information Technology Security Awareness and Training Program Links to an external site. (Pages 1-39)
o Everyone has a role to play in cybersecurity and protecting both the IT and OT networks of the organization. This document will help you understand ways to implement and train people on network security. It will help you when examining the IT and OT network security practices for the assignment this week and overall project for the course.

1. Discussion Question
Initial Post Directions
Please write a minimum of 200 word discussion board post addressing the following prompts:
a. History and Creation of the Framework Links to an external site.
 This article will provide some background and information on the NIST roles and the development of the cybersecurity framework.
b. Uses and Benefits of the Framework Links to an external site.
 This article provides some analysis of the potential uses and benefits of using cybersecurity frameworks.

Prompts
1. Do you agree or disagree with the philosophy and processes that went into its creation?
2. Are cybersecurity frameworks potentially beneficial or not?