Abstract: This disclosure provides an infrastructure monitoring tool, and related systems and methods, for collecting industrial process control and automation system risk data, and other data. A method includes discovering multiple devices in a computing system by a risk manager system. The method includes grouping the multiple devices into multiple security zones by the risk manager system. The method includes, for each security zone, causing one or more devices in that security zone to provide information to the risk manager system identifying alerts and events associated with the one or more devices. The method includes storing the information, by the risk manager system, in association with unique identifier values, the unique identifier values identifying different types of information.

Abstract: This disclosure provides for risk management in an air-gapped environment. A method includes collecting data, by a risk manager system, from a plurality of computing devices in an air-gapped environment. The air-gapped environment includes a control system that is substantially or completely isolated from unsecured external networks. The method includes applying rules to analyze the collected data and identify cyber-security threats to the computing devices in the air-gapped environment. The method includes interacting with a user to display the results of the analysis and the identified cyber-security threats.

Abstract: This disclosure provides a technique for using infrastructure monitoring software to collect cyber-security risk data. A method includes sending first information from a risk manager system to a plurality of agents each associated with a respective device in a computing system. The first information is associated with one or more risk-monitoring configurations. The method includes receiving second information by the risk manager system from the agents. The second information identifies identified vulnerabilities and events associated with the respective devices. The method includes storing and displaying to a user at least one of the second information and an analysis of the second information.

Abstract: This disclosure provides an infrastructure monitoring tool, and related systems and methods, for collecting industrial process control and automation system risk data, and other data. A method includes discovering multiple devices in a computing system by a risk manager system. The method includes grouping the multiple devices into multiple security zones by the risk manager system. The method includes, for each security zone, causing one or more devices in that security zone to provide information to the risk manager system identifying alerts and events associated with the one or more devices. The method includes storing the information, by the risk manager system, in association with unique identifier values, the unique identifier values identifying different types of information.

Abstract: This disclosure provides an apparatus and method for providing possible causes, recommended actions, and potential impacts related to identified cyber-security risk items. A method includes identifying, by a risk manager system, a plurality of connected devices that are vulnerable to cyber-security risks. The method includes identifying, by the risk manager system, cyber-security risks in the connected devices. The method includes, for each identified cyber-security risk, identifying by the risk manager system at least one possible cause, at least one recommended action, and at least one potential impact. The method includes displaying, by the risk manager system, a user interface that includes a summary of the identified cyber-security risks.