Cyber-Physical Systems (CPSs) are smart systems that include engineered interacting networks of physical and computational components. They integrate computation, communication, sensing, and actuation with physical systems to fulfill time-sensitive functions with varying degrees of interaction with the environment, including human interaction. This technological evolution is expected to bring tremendous benefits for government, the society, and the economy, including improved productivity and efficiency, better flexibility and agility, and increased profitability. However, it also comes with increased cyber security and privacy risks, primarily deriving from the integration of the physical space with cyberspace. Thus, as in all cases of a major shift in computing paradigms, a number of cyber security and privacy challenges arise, that cannot be addressed by simply porting solutions from other domains, such as for example the domain of Information and Communication Technologies. In this talk an overview of such challenges, current practices for addressing them, as well as areas open for research in the field will be provided.