Journal Published Online: 15 April 2026
Volume 10, Issue 1

An Integrated Cyber-Risk–Based Process Safety Framework for Cybersecurity Risk Assessment in Chemical Process Industries

CODEN: SSMSCY

Abstract

Although industrial control systems are crucial for enhancing safety and reliability in the chemical process industries (CPI), they also introduce cybersecurity vulnerabilities. This article presents a comprehensive method for prioritizing and exploring these vulnerabilities in CPI process control systems, offering structured strategies for assessing and mitigating cyber risks. Our approach, namely an integrated cyber-risk-based process safety (RBPS) framework, integrates the cybersecurity RBPS management system with cyber process hazard analysis, layer of protection analysis, common vulnerability scoring system, and exploit prediction scoring system. To demonstrate the effectiveness of this method, we assessed the cybersecurity risks associated with a distillation column and its overhead receiver in a refinery. In this case study, we evaluated four threat vectors: data manipulation, denial of service (DoS), privilege escalation, and credential stuffing using the cyber-RBPS framework. The results indicated that privilege escalation posed the highest risk in this specific example. These findings underscore the necessity of a robust defense-in-depth strategy encompassing advanced technological safeguards, continuous monitoring, and workforce training.

Author Information

Sabuj, Md Abdus
Center for Data Analytics and Cybersecurity, Lamar University, Beaumont, TX, USA
Robertson, Denny
Process Plus, Inc., Beaumont, TX, USA
Richmond, Peyton
Dan F. Smith Department of Chemical and Biomolecular Engineering, Lamar University, Beaumont, TX, USA
Lou, Helen H.
Dan F. Smith Department of Chemical and Biomolecular Engineering, Lamar University, Beaumont, TX, USA Center for Data Analytics and Cybersecurity, Lamar University, Beaumont, TX, USA
Pages: 17
Price: Free
Related
Reprints and Permissions
Reprints and copyright permissions can be requested through the
Copyright Clearance Center
Details
Stock #: SSMS20250033
ISSN: 2520-6478
DOI: 10.1520/SSMS20250033