ISA Global Cybersecurity Alliance

22 June 2021
New White Paper: Leveraging ISA 62443-3-2 For Automation and Control Systems Cybersecurity Risk Assessment and Risk Related Strategies

RESEARCH TRIANGLE PARK, N.C. (22 June 2021)—The International Society of Automation (ISA) and the ISA Global Cybersecurity Alliance (ISAGCA), with contributing author Harold Thomas, have released a white paper entitled "Leveraging ISA 62443-3-2 For IACS Risk Assessment and Risk Related Strategies."

The white paper provides the reader with an overview of ISA 62443-3-2, “Security Risk Assessment for Design,” as well as a summary of some of the methodologies that can be used to assist the execution of the industrial automation control system (IACS) cybersecurity risk assessment work process requirements, detailed in the standard.

The major steps include:

Identification of the System under Consideration (SuC)
Perform an Initial Cyber Risk Assessment
Partition the SuC into Zones and Conduits
Perform a Detailed Level Cyber Risk Assessment
Document Updated Cyber Security Requirements for Detailed Design

“ISAGCA’s mission is to enable and accelerate adoption of cybersecurity practices for all stakeholder groups based on the ISA/IEC 62443 family of automation cybersecurity standards,” commented Andre Ristaino, ISAGCA Managing Director. “Our member companies are working in collaboration with one another, industry partners, and regulatory/legislative bodies to secure automation that affects our everyday lives.”

The white paper is available to download here.

In addition to the white paper, ISAGCA and Harold Thomas have previously released a May 6th webinar on the subject, as well as a blog entitled “Getting Started With Cybersecurity Risk Assessment: When It’s Not About Information Technology” published on May 11th.

About ISAGCA
The ISA Global Cybersecurity Alliance is made up of 50 member companies, representing more than $300 billion in aggregate revenue across more than 2,400 combined worldwide locations. Automation and cybersecurity provider members serve 31 different industries, underscoring the broad applicability of the ISA/IEC 62443 series of standards. Current members of ISAGCA include 1898 & Co. (Burns McDonnell), ACET Solutions, aeSolutions, Baserock IT Solutions, Bayshore, Carrier Global, Claroty, ConsoleWorks, Coontec, CyberOwl, CyPhy Defense, Deloitte, Digital Immunity, Dragos, Eaton, exida, Ford Motor Company, Fortinet, Honeywell, Idaho National Laboratory, Idaho State University, ISASecure, Johns Manville, Johnson Controls, KPMG, LOGIIC, Mission Secure, MT4 senhasegura, Munio Security, Nova Systems, Nozomi Networks, PAS, PETRONAS, Pfizer, Radiflow, Rockwell Automation, Schneider Electric, Surge Engineering, TDI Technologies, Tenable, TI Safe, Tripwire, UL, Wallix, WINICSSEC, WisePlant, Xage Security, and Xylem. For more information about ISAGCA, visit www.isa.org/isagca.

NEWS CENTER

ISAGCA Updates

Members

Join the Movement: Contact ISA to Learn More