domains / families / security / performing-scada-hmi-security-assessment

performing-scada-hmi-security-assessment

separate

'Perform security assessments of SCADA Human-Machine Interface (HMI)

When to use

• When assessing the security posture of HMI systems in SCADA/DCS environments
• When evaluating web-based HMI interfaces for common web vulnerabilities
• When auditing HMI authentication, authorization, and session management
• When testing communication security between HMIs and PLCs/RTUs
• When preparing for IEC 62443 or NERC CIP compliance assessments

When not to use

• testing HMIs in active production without a maintenance window and rollback plan
• PLC-level protocol analysis
• general web application testing on non-OT systems

Skill page

Source