期刊名称：International Journal of Computer and Information Technology
印刷版ISSN：2279-0764
出版年度：2014
卷号：3
期号：4
页码：819
出版社：International Journal of Computer and Information Technology
摘要：The potential for catastrophic cyber attacks that can cripple the operations of critical infrastructures of nations is worrying. The consequences of cyber attack to the Supervisory Control and Data Acquisition (SCADA) systems are wide, resulting in potentially catastrophic damages and disruption. This paper proposes for the Critical National Information Infrastructure (CNII) organizations to comply with the ISO/IEC 27001:2013 or Information Security Management System (ISMS), which provides a systematic guidance for the organization's information security risks management and the implementation of security controls to reduce such risks to an acceptable level. The implementation of the ISMS certification in Malaysia's CNII will be the case study of this paper. Future works in this area can be further conducted, which may lead to the development of critical infrastructure protection (CIP) programs and the development of risk management frameworks to counter threats from cyber terrorism attacks for CNII.
关键词：Critical National Information Infrastructure ; (CNII); Cyber Terrorism; Cyberspace; SCADA
