Cybersecurity of industrial and information systems

IEC 62443 series, ISO/IEC 27000 family, NIS 2 Directive, Cyber Resilience Act, NIST and NERC frameworks, links with functional safety.

Themes concerned: OT cybersecurity · IT cybersecurity · Oil & Gas · Chemical & Petrochemical · Pharma & Biotech · Power generation · Renewables · Nuclear · Water & Wastewater · Mining & Metals · Transportation & Mobility · Building & Infrastructure · Natural gas & LNG · Oil & fuels · Coal · Nuclear energy · Photovoltaics · Solar thermal · Wind power · Hydropower · Geothermal · Marine energy · Electricity & grid · Hydrogen · Storage / BESS · Pumped storage · Predictive maintenance · Generative AI · Regulation

35 standards and rules, 1 of them with a detailed sheet. Each line gives the designation, the subject and the publishing body. An underlined designation leads to its detailed sheet; the target, on the right, puts the standard at the centre of the map.

Show this domain on the map

IEC 62443Industrial Automation and Control Systems Security Also: ISA/IEC 62443, ISA-99IEC
- IEC TS 62443-1-1Terminology, concepts and modelsIEC
- IEC 62443-2-1Security program requirements for IACS asset ownersIEC
- IEC TR 62443-2-3Patch management in the IACS environmentIEC
- IEC 62443-2-4Security program requirements for IACS service providersIEC
- IEC TR 62443-3-1Security technologies for industrial automation and control systemsIEC
- IEC 62443-3-2Security risk assessment for system designIEC
- IEC 62443-3-3System security requirements and security levelsIEC
- IEC 62443-4-1Secure product development lifecycle requirementsIEC
- IEC 62443-4-2Technical security requirements for IACS componentsIEC

Information security 6

Themes: IT cybersecurity

ISO/IEC 27000Information security management systems: overview and vocabularyISO/IEC
ISO/IEC 27001Information security management systems: requirementsISO/IEC
ISO/IEC 27002Information security controlsISO/IEC
ISO/IEC 27005Guidance on managing information security risksISO/IEC
ISO/IEC 27019Information security controls for the energy utility industryISO/IEC
ISO/IEC 27035Information security incident managementISO/IEC

European legislation 3

Themes: IT cybersecurity

(EU) 2022/2555NIS 2 Directive: high common level of cybersecurity across the Union Also: NIS 2EU
(EU) 2024/2847Cyber Resilience Act: cybersecurity requirements for products with digital elements Also: CRAEU
(EU) 2019/881Cybersecurity Act: ENISA and cybersecurity certificationEU

United States 5

NIST SP 800-82Guide to operational technology (OT) securityNIST
NIST SP 800-53Security and privacy controls for information systems and organizationsNIST
NIST CSFCybersecurity frameworkNIST
NIST SP 800-207Zero trust architectureNIST
NERC CIPCritical infrastructure protection for the bulk electric systemNERC

Safety and security 4

IEC TR 63069Framework for functional safety and securityIEC
IEC 63074Safety of machinery: security aspects related to functional safety of safety-related control systemsIEC
VDI/VDE 2182IT security for industrial automationVDI/VDE
IEC 62351Power systems management and associated information exchange: data and communications securityIEC

NAMUR 6

NAMUR NA 135Remote maintenance of automation systems Also: NAMUR NE 135NAMUR
NAMUR NE 153Automation Security 2020: design, implementation and operation of industrial automation systemsNAMUR
NAMUR NA 163IT security risk assessment of safety instrumented systemsNAMUR
NAMUR AK 4.18 HärtungHardening of computer systemsNAMUR
NAMUR AK 4.18 PatchmanagementPatch managementNAMUR
NAMUR AK 4.18 NetzwerkarchitekturPlanning and implementation aspects of a secure network architectureNAMUR

EC-BCI rules 1

TI EC BCI 22Cybersecurity of instrumentation, control and electrical systemsEC-BCI