Humans - the weakest and strongest link in securing systems

Humans design, operate and are the net beneficiaries of most systems. However humans are fallible and make mistakes. At the same time humans are adaptable and resourceful in both designing systems and correcting them when they go wrong. These characteristics mean that humans can be both the strongest and the weakest link in system security. The aim of this paper is to look at how industrial control systems can use their human actors to build secure systems even noting the fallibility of the underlying machine.