Enterprise Cybersecurity

Cybersecurity relates to all Enterprise architectural levels from plant sensors to the boardroom. However Industrial Automation and Control Systems (IACS) are limited to industrial devices such as plant sensors and actuators, Human-Machine Interfaces (HMI) and Supervisory Computers and Data Aquisition Systems (SCADA). These IACS systems are typically isolated from office networks by Industrial firewalls. IT systems (by definition) do not directly control plant equipment.

PERA defines architectural levels according to the required Reliability, Repairability, Response and Resolution (4Rs). These are similar to (but different from) the Security Levels (SL1 to SL3) defined by the ISA 62443 IACS Cybersecurity Standard. Ways to address these different Levels concepts will be discussed in the PERA User Guides below.

Generic Cybersecurity Concepts and Definitions

• What is an Enterprise Cybersecurity Program ?
• Cybersecurity Program Implementation and Support
• Industrial Network Design Principles
• Secure Interfacing of IT and IACS Networks
• Secure Programming of IACS devices and networks.
• PERA Industry Classification System
• What is OT Cybersecurity?

PERA User Guides (by Industry)

• Process Industry
• Manufacturing Industry
• Transportation Industry
• Power Generation and Transmission Industry
• Insurance Industry
• Regulators
• Educators

Reference Articles on Enterprise Cybersecurity

The following are some useful Articles and Papers on Enterprise Cybersecurity.

• Applying ISO/IEC 27001/2 and ISA/IEC 62443 for OT Environments
• Quick Start Guide to ISA/IEC 62443 from ISAGCA
• ISASecure Conformance Certification to ISA/IEC 62443
• Cybersecurity Incident Command System for Industrial Control Systems (ICS4ICS)

 


by Gary Rathwell

---

Back to PERA Home Page