Cloud-Assisted IoT-Based SCADA Systems Security: A Review of the State of the Art and Future Challenges <s> 6) RISK MANAGEMENT <s> Supervisory Control and Data Acquisition (SCADA) systems are deployed worldwide in many critical infrastructures ranging from power generation, over public transport to industrial manufacturing systems. Whilst contemporary research has identified the need for protecting SCADA systems, these information are disparate and do not provide a coherent view of the threats and the risks resulting from the tendency to integrate these once isolated systems into corporate networks that are prone to cyber attacks. This paper surveys ongoing research and provides a coherent overview of the threats, risks and mitigation strategies in the area of SCADA security. <s> BIB001 </s> Cloud-Assisted IoT-Based SCADA Systems Security: A Review of the State of the Art and Future Challenges <s> 6) RISK MANAGEMENT <s> Contemporary industrial control systems no longer operate in isolation, but use other networks (e.g., corporate networks and the Internet) to facilitate and improve business processes. The consequence of this development is the increased exposure to cyber threats. This paper surveys the latest methodologies and research for measuring and managing this risk. A dearth of industrial-control-system-specific security metrics has been identified as a barrier to implementing these methodologies. Consequently, an agenda for future research on industrial control system security metrics is outlined. The "functional assurance" concept is also introduced to deal with fail-safe and fail-secure industrial control system operations. <s> BIB002
Ongoing research on SCADA systems is presented by Nicholson et al. BIB001 , who emphasize that the threats and risks to SCADA systems are not completely addressed because of their integration with corporate networks, making them more vulnerable to cyberattacks. Identification of risk mitigation techniques is a positive contribution from BIB001 . Research challenges faced by SCADA systems in risk assessment are outlined in  and BIB002 .