INDUSTRIAL COMMUNICATION NETWORKS - NETWORK AND SYSTEM SECURITY - PART 1-1: TERMINOLOGY, CONCEPTS AND MODELS
International Electrotechnical Committee
FOREWORD
INTRODUCTION
1 Scope
1.1 General
1.2 Included functionality
1.3 Systems and interfaces
1.4 Activity-based criteria
1.5 Asset-based criteria
2 Normative references
3 Terms, definitions and abbreviations
3.1 General
3.2 Terms and definitions
3.3 Abbreviations
4 The situation
4.1 General
4.2 Current systems
4.3 Current trends
4.4 Potential impact
5 Concepts
5.1 General
5.2 Security objectives
5.3 Foundational requirements
5.4 Defence in depth
5.5 Security context
5.6 Threat-risk assessment
5.6.1 General
5.6.2 Assets
5.6.3 Vulnerabilities
5.6.4 Risk
5.6.5 Threats
5.6.6 Countermeasures
5.7 Security program maturity
5.7.1 Overview
5.7.2 Maturity phases
5.8 Policies
5.8.1 Overview
5.8.2 Enterprise level policy
5.8.3 Operational policies and procedures
5.8.4 Topics covered by policies and procedures
5.9 Security zones
5.9.1 General
5.9.2 Determining requirements
5.10 Conduits
5.10.1 General
5.10.2 Channels
5.11 Security levels
5.11.1 General
5.11.2 Types of security levels
5.11.3 Factors influencing SL(achieved) of a zone or
conduit
5.11.4 Impact of countermeasures and inherent security
properties of devices and systems
5.12 Security level lifecycle
5.12.1 General
5.12.2 Assess phase
5.12.3 Develop and implement phase
5.12.4 Maintain phase
6 Models
6.1 General
6.2 Reference models
6.2.1 Overview
6.2.2 Reference model levels
6.3 Asset models
6.3.1 Overview
6.3.2 Enterprise
6.3.3 Geographic sites
6.3.4 Area
6.3.5 Lines, units, cells, vehicles
6.3.6 Supervisory control equipment
6.3.7 Control equipment
6.3.8 Field I/O network
6.3.9 Sensors and actuators
6.3.10 Equipment under control
6.4 Reference architecture
6.5 Zone and conduit model
6.5.1 General
6.5.2 Defining security zones
6.5.3 Zone identification
6.5.4 Zone characteristics
6.5.5 Defining conduits
6.5.6 Conduit characteristics
6.6 Model relationships
Bibliography
Describes the terminology, concepts and models for Industrial Automation and Control Systems (IACS) security.
| Document Type | Standard |
| Status | Current |
| Publisher | International Electrotechnical Committee |
| Committee | TC 65 |
