A method of cyber risk assessment for occupational risk in machinery

With the industry of the future or Industry 4.0, it is increasingly possible for industrial systems and machinery to be connected to the company's information technology (IT) network. These machines can therefore be the target of cyber-attacks. This cyber-attack risk can lead to occupational risks for the worker in the event of machine malfunction. Usually, cybersecurity aims to cover the availability of the equipment or the loss or exfiltration of data. This study proposes a cyber risk analysis method for industrial machinery with a view to considering the risk for the worker (occupational safety and health (OSH) point of view). The method is based on the use of checklists and tables, thus guiding those conducting this analysis. The crucial point is to build attack scenarios which will be evaluated in terms of occurrence probability and impact. This proposed method was implemented on a specific case of an automated system.