Abstract

This thesis investigates which cybersecurity strategies should be implemented in control systems

to enhance cybersecurity. The study addresses three central questions, carefully designed to

guide the research through its various phases and fulfill its purpose. The first question examines

which cybersecurity strategies should be implemented in control systems in accordance with

current requirements and established best practices. To answer this, a literature review of

previous research and new cybersecurity requirements was conducted, identifying best practices

for cybersecurity in control systems. The second question explores which cybersecurity

strategies are currently implemented by actors in their management of products within the

control system architecture. This was investigated through semi-structured interviews with five

experts who deliver products within this architecture. To address the third question, which

focuses on how actors within the control system architecture can streamline cybersecurity

measures in their products, an analysis and comparison between best practices and current

practices were conducted. This discussion revealed that a risk assessment and network

segmentation should be implemented to enhance cybersecurity. Additionally, increased

cybersecurity competence and the introduction of logging and monitoring of systems and

components can further improve security