As cited
Copy frozen at (site build).
ot ics
ISA/IEC standards require integrated safety and cybersecurity for industrial control systems, OT-Knight’s Barreto Jijón says
Industrial control system (ICS) asset owners should integrate functional safety and cybersecurity management into a single governance lifecycle rather than running parallel programs, according to Rafael Barreto Jijón of OT-Knight. ISA/IEC standards already mandate this integration, requiring safety instrumented systems to incorporate vulnerability assessments, access controls, and resilience against cyber-physical attacks demonstrated by incidents like TRITON/TRISIS. Organizations should align risk assessments, maintenance procedures, change management, and incident response across both disciplines, with cross-functional teams sharing competencies and threat scenarios.
Why it matters: Process operators and critical infrastructure managers must restructure governance to coordinate safety and cybersecurity programs under one policy framework and compliance audit, as current standards already require this integration and cyberattacks can defeat multiple credited protection layers when safety and IT networks lack proper segregation.
- Source published
- First seen by Cybersecurity Tracker