Cybersecurity hazard analysis tool

A non-transitory computer readable medium containing instruction that when executed cause at least one processor device to implement:

• a cybersecurity risk model configured for cybersecurity risk and process risk modeling of a plurality of assets configured in an industrial control system (ICS) comprising a plurality of computers including process controllers connected together by at least one communications network coupled by input/output (I/O) devices to field devices including sensors and actuators that are coupled to processing equipment, the plurality of assets configured together to implement a process involving at least one tangible material;
• the risk model processing input data including event path data comprising a plurality of event paths including attack and defense scenarios, each leading to a cybersecurity hazard to provide a plurality of cybersecurity hazards and at least one process hazard, exposure data for the cybersecurity hazards and process hazard, and consequence data for the cybersecurity hazards and the process hazard including a severity of a failure, the risk model outputting functional consequences of the failure of each of the cybersecurity hazards and the process hazard, and a likelihood of the failure for each of the cybersecurity hazards and the process hazard, wherein the exposure data includes static exposure resulting from at least one of design or network segmentation, and dynamic exposure resulting from at least one of not installing security patches or use of weak passwords, and
• a risk analysis engine processing the functional consequences and the likelihood of the failures for the cybersecurity hazards and for the process hazard, wherein the risk analysis engine further processes cybersecurity countermeasures that reduce a likelihood of a cyberattack being successful and process safeguards that reduce a severity of the cyberattack, and
• wherein the risk analysis engine generates outputs including a quantified risk for each of the cybersecurity hazards and the process hazard;
• and
• wherein at least a portion of the plurality of event paths comprise a multi-stage event path comprising a plurality of stages, and wherein the event path data comprises a threat actor executing a threat action, and wherein process cybersecurity countermeasures and process safeguards are applied to each of the plurality of stages.