This standard defines the elements necessary to establish acyber security management system (CSMS) for industrial automationand control systems (IACS) and provides guidance on how to developthose elements. This document uses the broad definition and scopeof what constitutes an IACS described in ANSI/ISA–99.01.01–2007.[1]
The elements of a CSMS described in this standard are mostlypolicy, procedure, practice and personnel related, describing whatshall or should be included in the final CSMS for theorganization.
NOTE Other documents in the ISA-99 series and in theBibliography discuss specific technologies and/or solutions forcyber security in more detail.
The guidance provided on how to develop a CSMS is an example. Itrepresents the authors’ opinion on how an organization could goabout developing the elements and may not work in all situations.The user of this standard will have to read the requirementscarefully and apply the guidance appropriately in order to developa fully functioning CSMS for their organization. The policies andprocedures discussed in this standard should be tailored to fitwithin the organization.
NOTE There may be cases where a pre-existing CSMS is in placeand the IACS portion is being added or there may be someorganizations that have never formally created a CSMS at all. Theauthors of this standard cannot anticipate all cases where anorganization will be establishing a CSMS for the IACS environment,so this standard does not attempt to create a solution for allcases.
- Edition:
- 09
- Published:
- 01/13/2009
- ANSI:
- ANSI Approved
- Number of Pages:
- 170
- File Size:
- 1 file , 2.7 MB
Reviews
There are no reviews yet.