Control system security

Control system security, or industrial control system (ICS) cybersecurity, is the prevention of (intentional or unintentional) interference with the proper operation of industrial automation and control systems. These control systems manage essential services including electricity, petroleum production, water, transportation, manufacturing, and communications. They rely on computers, networks, operating systems, applications, and programmable controllers, each of which could contain security vulnerabilities. The 2010 discovery of the Stuxnet worm demonstrated the vulnerability of these systems to cyber incidents. The United States and other governments have passed cyber-security regulations requiring enhanced protection for control systems operating critical infrastructure. The term industrial control system (ICS) is the most widely recognized and is considered the standard term used to describe control system security. Under industrial control systems there are numerous subgroups. These include SCADA (Supervisory Control and Data Acquisition) security, DCS (Distributed Control System), and PLC (Programmable Logic Controller) environments. However, the term may also be referred to as automation and control systems (ACS) . Automation and control systems (ACS) is the broader term that is frequently used in the context of engineering and manufacturing.

Control system security, or industrial control system (ICS) cybersecurity, is the prevention of (intentional or unintentional) interference with the proper operation of industrial automation and control systems. These control systems manage essential services including electricity, petroleum production, water, transportation, manufacturing, and communications. They rely on computers, networks, operating systems, applications, and programmable controllers, each of which could contain security vulnerabilities. The 2010 discovery of the Stuxnet worm demonstrated the vulnerability of these systems to cyber incidents. The United States and other governments have passed cyber-security regulations requiring enhanced protection for control systems operating critical infrastructure. The term industrial control system (ICS) is the most widely recognized and is considered the standard term used to describe control system security. Under industrial control systems there are numerous subgroups. These include SCADA (Supervisory Control and Data Acquisition) security, DCS (Distributed Control System), and PLC (Programmable Logic Controller) environments. However, the term may also be referred to as automation and control systems (ACS) . Automation and control systems (ACS) is the broader term that is frequently used in the context of engineering and manufacturing. ===NERC=== The most widely recognized and latest NERC security standard is NERC 1300, which is a modification/update of NERC 1200. The latest version of NERC 1300 is called CIP-002-3 through CIP-009-3, with CIP referring to Critical Infrastructure Protection. These standards are mandatory for electric systems and are used to secure bulk electric systems although NERC has created standards within other areas. The bulk electric system standards also provide network security administration while still supporting best-practice industry processes. ===NIST=== Although it is not a standard, the NIST Cybersecurity Framework (NIST CSF) provides a high-level taxonomy of cybersecurity outcomes and a methodology to assess and manage those outcomes. It is intended to help private sector organizations that provide critical infrastructure with guidance on how to protect it. NIST Special Publication 800-82 Rev. 2 "Guide to Industrial Control System (ICS) Security" describes how to secure multiple types of Industrial Control Systems against cyber attacks while considering the performance, reliability, and safety requirements specific to ICS. ==External links== IEC 62443 US NIST webpage US NERC Critical Infrastructure Protection (CIP) Standards UK NPSA Tools, Catalogues and Standards ==References==

Text derived from https://en.wikipedia.org/w/index.php?oldid=1376645161 under CC BY-SA 4.0; modifications have been made.