Guideline Industrial Security - Pierre Kobes - Bog

Insufficient security is careless, too much security is inefficient.

Recent surveys point out that the fear of cyber attacks is one of the three biggest business risks. Digitalization based on cloud computing, mobility or the internet of things are important drivers for pushing productivity in industrial environments. Cybersecurity is a prerequisite for digitalization in the industry.

The importance of security protection concepts is growing with increasing external attacks. Operators of critical infrastructure have to maintain minimum standards and to protect their installations against cyber-attacks. Cybersecurity requires a holistic approach. Effective protection concepts can only be implemented with a range of organizational and technical measures. Product suppliers, system integrators, and operators have to work together to deploy holistic protection solutions. The new edition describes the security protection scheme in much more detail. A holistic protection includes a combination of technology, process, and people aspects for the protection of industrial facilities during operation.

The series of standards IEC 62443 supports the development of holistic solutions for the protection of industrial facilities and addresses all involved actors. Correspondingly IEC 62443 is perceived as complex. This guideline has the aim to simplify the approach to the deployment of protection concepts by giving an overview about IEC 62443, summarizing the ideas and concepts, and illustrating practical solutions.