ISA's SP99 Security Standards Committee makes progress
The committee has conducted a second round of voting on the draft standard, Security for Industrial Automation and Control Systems Part 1: Terminology, Concepts and Models. The draft received enough votes to pass, but the committee will evaluate all comments and reissue another draft if necessary. This first standard will establish the context for all of the remaining standards in the ISA-99 series by defining a common set of terminology, concepts and models for electronic security.
The planned Part 2 standard in the ISA-99 series, Establishing an Industrial Automation and Control Systems Security Program, is being prepared for its own second committee ballot in the coming months. This standard will provide guidance for developing a program for the security of industrial automation and control systems-including detailed guidance on process activities and key elements for establishing a cyber security management system.
In addition to the work on the Part 1 and Part 2 standards, ISA-SP99 has also established a new working group to develop a further standard in the series, Specific Security Requirements for Industrial Automation and Control Systems. This standard will define the characteristics of industrial automation and control systems that differentiate them from other information technology systems from a security point of view. Based on these characteristics, the standard will establish the security requirements that are unique to this class of systems. Valuable technical input into this standard is anticipated from related work within the International Electrotechnical Commission (IEC). Valuable input and support is also expected from key U.S. government entities including the Department of Homeland Security, the Department of Energy, Idaho National Laboratory, and the National Institute for Standards and Technology - all of which have provided vital support throughout the ISA-SP99 initiative.
Beyond its work on the initial standards in the ISA-99 series, the committee is also planning to release a revised and updated technical report, first published in 2004, for committee vote. This technical report, Security Technologies for Industrial Automation and Controls Systems, focuses on identifying and evaluating currently available technologies for control systems security, covering areas including:
Each technology is discussed in terms of security vulnerabilities addressed by the technology, typical deployment, known issues and weaknesses, use in the industrial automation and control systems environment, future directions, recommendations and guidance, and references.
"This document is intended to document the known state-of-the-art of cyber security technologies as applied to the industrial automation and control systems environment," said technical report working group co-chair Eric Byres of Byres Security. "We're going to clearly define what can reasonably be deployed today, and identify areas where more research is needed."
"ISA-SP99 is doing an amazing amount of high-quality work," stated committee chair Bryan Singer of FluidIQs. "These standards and guidelines will truly make a difference in industrial automation and control systems security, and we're committed to continuing our progress."
ISA's SP99 committee has over 250 members representing a variety of companies, organizations and expertise from across industry, government, and academia. The committee is focused on industrial automation and control systems whose compromise could result in endangerment of the public or employees, regulatory violations, loss of proprietary or confidential information, and national security risks. The concept of manufacturing and control systems electronic security is applied in the broadest possible sense, encompassing all types of plants, facilities, and systems in all industries.
Founded in 1945, ISA is a leading, global, nonprofit organization that is setting the standard for automation by helping over 30,000 worldwide members and other professionals solve difficult technical problems, while enhancing their leadership and personal career capabilities. Based in Research Triangle Park, North Carolina, ISA develops standards; certifies industry professionals; provides education and training; publishes books and technical articles; and hosts the largest conference and exhibition for automation professionals in the Western Hemisphere. ISA is the founding sponsor of The Automation Federation.
MORE INDUSTRY NEWS
ISA and Automation Federation expert Steve Mustard to present at Advanced Design and...
Mustard is featured in an online article—posted by PLASTICSTODAY—that promotes the presentation he will be giving next week at the Advanced...
On Robot to announce expansion into US market at Automate 2017
Officially launching to the North American market at Automate 2017 in April, On Robot’s two-finger RG2 grippers—available in both single and...
Helukabel announces completion of expanded German production plant
One of the project’s objectives was to consolidate global R&D activities into one location. The engineering center houses additional test and...
EU Horizon 2020 launches RobMoSys robotics software project
RobMoSys (Composable Models and Software for Robotics) is an €8 million Innovation Action involving 9 partners from 5 countries and will be...
SME Education Foundation partners with NASA Hunch to advance high school manufacturing education
This new collaboration is designed to attract and introduce more high school students to career opportunities in the industry and prepare them to...
HighJump's 3PL WMS solution brings Canadian frozen storage company to the cloud
HighJump’s cloud solution is designed to simplify each step of the supply chain while assuring levels of service through system uptime, response...
RedViking helps GKN Driveline ensure manufacturing visibility
GKN, a manufacturer of automotive driveline products, was seeking an end-to-end traceability strategy and discovered the Argonaut system from...
Magic Software's Magic xpi brings Industry 4.0 to Swiss manufacturer
Assa Abloy AG, the Swiss global leader in locking systems and security technology, has put the Magic xpi Integration Platform at the heart of the...
What Does a Good Machine Sound Like? A look at 3DSignals’ Predictive Maintenance Efforts
By Bill Lydon, Editor, Automation.com
You know that feeling when you walk past a machine, and something just doesn’t quite sound right? This...
Bringing Data Visualization to the Forefront in Fastening Operations
By Anthony Borges, PINpoint Information Systems
Patterns, trends and associations that might go undetected in text based information can be...