This book is a practical guide to defending critical infrastructure in today’s cyber world. Critical infrastructure includes energy, power, water, transportation, manufacturing, and facility systems, along with the sensors and actuators that make up operational technology (OT). It presents a systems engineering framework for coordinating interdependent organizations and technologies, ensuring seamless performance across multiple fields.
Bridging the traditional divide between information technology (IT), operational technology (OT), and cybersecurity, the book offers practical starting points and disciplined approaches for governance boards, project managers, and engineers. Clear guidance is provided on how to implement cybersecurity mitigations within critical infrastructure, making complex concepts accessible and actionable.
Many professionals in infrastructure operations, engineering, and technical management feel unprepared to address cyber threats. This book fills that gap, serving as both a self-study resource and a refresher for those without formal training in computer science, cyber, or control systems—and as a teaching tool for explaining these principles to others.
The goal is to present enduring cybersecurity concepts through proven systems engineering methods, along with new techniques to align stakeholders and resources. From technicians and operators to designers and decision-makers, readers will gain tools to connect cybersecurity practices with mission objectives.
By combining systems engineering and cyber defense principles, this book equips professionals to work effectively with incident responders, analysts, engineers, and senior management. Decision-making skills are presented in a clear, easy-to-understand style, supported by candid questions, current strategies, and real-world, case-based examples.
Table of Contents:
1. Understanding the Game 2. History of the Term “Cyber” 3. Cyber Policy, Regulations, and Guidelines 4. Cyber Is a Medium (Not a Domain) 5. Cyber Paradox 6. Cyber Vulnerabilities Start at the Hardware Level 7. Threats to Information-intensive Systems 8. Use Cases and Operational View (OV) Illustrations 9. Road to Commoditization 10. Transition of Innovation to Operations 11. Lifecycle Phases 12. Concept Development 13. Needs Analysis 14. Detail Design 15. Design tradeoffs 16. Modernization Strategies 17. Architecture Approaches 18. Software Approaches 19. Biometrics 20. Foundations of Systems Engineering 21. Workforce 22. Managing Risk 23. Abstraction Models 24. Creating a Model-based Organization 25. Stakeholder Alignment 26. Conclusion Appendix Questionnaire Resource
About the Author :
Dr. Scalco is currently Professor of Systems Engineering at the US Department of Defense (DOD) Acquisition University (DAU) (since 2024). Prior to DAU, Aleksandra held various government systems engineering and information systems security designer (ISSD) positions and was designated as a cybersecurity subject matter expert for control systems. She draws on more than 25 years of experience in systems engineering to provide insight into cybersecurity for control systems. She has helped teams design, develop, and field solutions to enhance cybersecurity for high-impact, national-level initiatives, employing systems engineering principles, along with knowledge of the ""problem space"" and available products and practices (the ""solution space""). She is the author of numerous publications and has authored curriculum and instructional design content on cybersecurity for critical infrastructure. Dr. Scalco is a Senior Member of the Institute of Electrical and Electronics Engineers (IEEE). She is a member of the seventh cohort of the International Council on Systems Engineering (INCOSE) Institute for Technical Leadership and holds a Certified Systems Engineering Professional (CSEP) designation. She is an Expert Certified in Information Technology Infrastructure Library (ITIL) IT Service Management. Aleksandra was a Colorado State University (CSU) Systems Engineering Outstanding Dissertation Awardee, 2021–2022. She is happily married (Rich).
Dr. Simske is currently (since 2018) Professor of Systems Engineering at Colorado State University (CSU). Prior to CSU, Steve held various positions at HP, HP Inc, and HP Labs, including the role of technical Fellow and Vice President/Director from 2011–2018. Before HP, Steve worked in a NASA CCDS (Center for the Commercial Development of Space) for 20 years (the last 13 years part-time) as a Ph.D. candidate, Post Doc and Research Professor, flying 18 experiments on 13 Space Shuttle missions (including ISS and KC-135 elements) as payload manager/designer, along with various sounding rockets. His degrees and PostDoc are in Biomedical, Electrical, and Aerospace Engineering. He has more than 240 US Patents and has helped create exercise-responsive pacemakers, impedance tomography systems, several plant and animal modules for spaceflight, digital scanners, digital senders, digital cameras, document digitization services, wireless wearable health monitors, forensic imaging devices, mobile authentication services, and 3D printing materials. Steve has written seven books and four more are in process. Steve is a Fellow of IEEE, NAI, IST, and CSU FIIE, and a winner of the 2022 CSU Best Teacher Award. Steve is happily married (Tess) and has two wonderful sons (Kieran, Dallen).
