Cybersecurity
Abstract
This chapter provides a general introduction to the cybersecurity, along with references to other sources of more detailed information. It also provides an overview of some of the basic concepts that are the foundation of any cybersecurity program, followed by a discussion of the similarities and differences between securing industrial systems and typical information systems. Industrial systems are typically employed to monitor, report on, and control the operation of a variety of different industrial processes. Establishing a basis for continual improvement requires that there first be some assessment of program effectiveness. The need for continual improvement can be described in the context of a simple plan-do-check-act model, which is applied to structure all processes. The ISA-62443 and IEC 62443 series of standards describe a small set of foundational requirements that encompass and, at times, help organize more specific detailed requirements, as well as the actions required for a security program.