Continuous ICS Security Evaluation Framework

Continuous Automated Risk Management (CARM) is a non-intrusive industrial network security monitoring framework designed to assist Asset Owners of operational industrial systems in managing risks and developing the IEC 62443-mandated security architecture. CARM automates system information collection, assesses security posture, and measures descriptive security metrics using machine learning and graph theory-based analyses. It also helps select the optimal set of technical countermeasures while considering constraints such as budget limitations.