User: steveclark

CPNI have some good advice

On: Evaluating Or Testing Utility SCADA Security?

They are a UK based organisation (I'm assuming that you are in the US), but they have produced lots of useful papers on risk assessment and risk management for SCADA. Full disclosure - I used to work there. A good starting point is here www.cpni.gov.uk/protectingyourassets/scada.aspx