Executive Program Cyber-Informed Dynamic Risk Assessment for safety-critical system

The increasingly close integration of Information Technology (IT) and Operational Technology (OT) is profoundly transforming cyber-physical systems across industrial and healthcare environments.

Greater connectivity, automation and data sharing create new opportunities, but also introduce new risk vectors. Cyber incidents can propagate through interconnected digital and physical dependencies, potentially affecting physical processes, safety functions and the continuity of essential services.

In this context, traditional static risk assessment approaches are no longer sufficient. There is a growing need for methodologies capable of capturing the dynamic evolution of threats, vulnerabilities, system states and uncertainty, supporting informed decision-making in complex, safety-critical environments.

This Executive Program addresses these challenges through an integrated approach that combines cybersecurity, safety engineering, reliability and probabilistic risk assessment, with a particular focus on two highly critical sectors: industrial infrastructure and healthcare infrastructure.

By the End of the Program, You Will Be Able To:

  • Understand the principles of dynamic and probabilistic cyber-physical risk assessment;

  • Apply Dynamic Bayesian Networks, Markov models and Bayesian Attack Graphs;

  • Model attack paths, vulnerabilities and evolving system states;

  • Identify cyber-physical dependencies and critical points of exposure;

  • Analyse cyberattacks, process anomalies and failures in safety-critical environments;

  • Account for aleatory and epistemic uncertainty in risk assessment processes;

  • Interpret analytical results to support decision-making in safety, business continuity and risk management.

Scientific Director

Simone Guarino – RTDA Research Fellow, Automation Research Unit, University Campus Bio-Medico of Rome.

The Executive Program is designed for professionals and academic profiles interested in cybersecurity, reliability and risk management in cyber-physical and safety-critical systems, including:

  • Researchers and PhD candidates in engineering, computer science, systems security and related disciplines;

  • Safety & Reliability Engineers;

  • Risk Analysts and cybersecurity professionals;

  • Professionals and practitioners working in healthcare infrastructure;

  • Industry professionals and technical specialists involved in OT/ICS systems.

Admission Requirements

A Bachelor’s or Master’s degree in one of the following fields:

  • Computer Engineering;

  • Electronic Engineering;

  • Management Engineering;

  • Biomedical Engineering;

  • Automation Engineering;

  • Computer Science;

  • Physics;

  • Mathematics;

or a related discipline.

The program consists of 20 hours of in-person training, delivered entirely in English, combining theoretical lectures, case studies and practical activities. Class size is limited to a minimum of 15 and a maximum of 30 participants.

The program is structured into three modules:

1. Dynamic Probabilistic Models for Cyber-Physical Risk Assessment (Dynamic Risk Modelling): Dynamic Bayesian Networks, Markov models and Bayesian Attack Graphs. Modelling attack paths, vulnerabilities and evolving system states. Aleatory and epistemic uncertainty, degradation mechanisms and the propagation of cyberattacks.

2. Industrial and Hospital Infrastructures for Safety-Critical Services (Cyber-Physical Architectures): Industrial architectures, including the Purdue Model, ICS/OT, PLCs, sensors and actuators; healthcare architectures, including IoMT, HIS, RIS and PACS. Cyber-physical dependencies, critical functions, cyber exposure points and applicable risk management frameworks.

3. Cyber-Physical Case Studies and Practical Activities (Hands-on Application): Applying probabilistic models to industrial and healthcare scenarios. Integrating Bayesian Attack Graphs with Markov and Bayesian models. Analysing cyberattacks, process anomalies and failures in controlled cyber-physical environments.

Dates and Schedule

22 February 2027 | 9:00 AM – 6:00 PM

Dynamic Probabilistic Models for Cyber-Physical Risk Assessment

23 February 2027 | 9:00 AM – 6:00 PM

Industrial and Hospital Infrastructures for Safety-Critical Services

24 February 2027 | 9:00 AM – 1:00 PM

Cyber-Physical Case Studies and Practical Activities

Venue

Via Amsterdam, 125 – 00144 Rome, Italy

Standard Fee – Industry Professionals, Researchers and Faculty Members\
€700.00

Reduced Academic Fee – PhD Candidates\
€450.00

Participants who attend at least 70% of the total program hours will be awarded a Certificate of Attendance issued by the University Campus Bio-Medico of Rome.

The Executive Program is delivered with the support of ESRA – European Safety and Reliability Association.

Cyber-physical risk cannot be effectively managed by looking at cyber and physical components in isolation.

This program equips participants with the methodologies and tools needed to understand how cyber threats evolve, how attacks can propagate across interconnected systems, and how quantitative models can support decision-making on safety and operational continuity in safety-critical environments.

By the end of the program, you will be able to:

  • Understand the evolving cyber threat landscape and its implications for safety-critical systems;

  • Identify cyber-physical dependencies, vulnerabilities and critical system functions;

  • Apply dynamic probabilistic approaches to model evolving risk scenarios;

  • Assess industrial and healthcare infrastructure from a cyber-physical perspective;

  • Integrate cybersecurity, safety, reliability and operational continuity into risk assessment processes;

  • Translate quantitative analyses into actionable risk management decisions.

Compila il modulo per ricevere la brochure

Privacy
Letta e compresa l’informativa sul trattamento dei dati personali ex art. 13 del GDPR
Profilazione
newsletter

Informazioni utili

* Possibilità di quote agevolate