©2026 Automation.com, a subsidiary of the International Society of Automation.
-
ISA provides technical resources and standards to help industrial automation professionals advance their careers and the field. We enable automation professionals worldwide to solve problems and enhance their skills by bringing people together to create new technologies and share best practices with future automation professionals.-
ISA Resources
-
Upcoming Events
-
Industry Insights
-
Consortia
-
ISA Global Cybersecurity Alliance
The ISA Global Cybersecurity Alliance (ISAGCA) is a collaborative forum to advance OT cybersecurity awareness, education, readiness, standardization and knowledge sharing. ISAGCA’s global ecosystem includes leaders such as Chevron, GSK, Trane Technologies, Honeywell, Johnson Controls, Schneider Electric, Rockwell Automation and Fortinet, among others. For more information, visit www.isagca.org.
230 Results Found
-
FeatureEU Cyber Resilience Act: Multiple Routes to Compliance, One Essential Starting Point—Risk Assessment
Although the final versions of the EN 62443 standards have not been released, manufacturers can use existing standards to start preparing to comply with them. -
NewsNineTenths Joins ISASecure to Advance Adoption of ISA/IEC 62443 Cybersecurity Standards
NineTenths to promote ISA/IEC 62443 to companies in Saudi Arabia and the Gulf Cooperation Council to guide them in adopting secure, cutting-edge technologies. -
NewsISA99 Committee Forms New Work Groups
ISA99 is forming work groups to review the effects of AI and supply chain requirements on IACS security. -
NewsOT Talent in APAC: Exploring Nontraditional Strategies and AI to Fill the Gaps
The ability to fill cybersecurity roles requires rethinking hiring strategies, investing in reskilling and implementing tools like AI. -
NewsAgilicus Joins ISA Global Cybersecurity Alliance to Accelerate Adoption of ISA/IEC 62443 Series of Standards
Agilicus and ISAGCA to work together to advance OT cybersecurity. -
NewsDeNexus Joins ISA Global Cybersecurity Alliance to Facilitate Broad Adoption of OT Cybersecurity Standards
The ISA/IEC 62443 framework, along with DeNexus’ expertise, will enable industries to assess, quantify and assign a cost to risk. -
FeatureSecuring America’s Water Systems: From Malicious Cyber Activity to Measurable Risk Reduction
Recent incidents have accelerated efforts to help water utilities improve their cybersecurity posture. One of the most significant is Project Watershed 250. -
FeatureA Look at Two Cyber Reporting Processes: EU CRA and US CIRCIA
Cyber incident reporting is entering a new phase on both sides of the Atlantic. -
White PaperFrom Compliance to Capability: A Practical SBOM Path for Industrial Small- and Medium-Sized Enterprises
For industrial small- and medium-sized enterprises (SMEs), the real challenge is not generating a software bill of materials (SBOM) once but maintaining trustworthy software composition data that supports vulnerability decisions throughout the product lifecycle. -
FeatureCybersecurity in US Water Systems: Lessons from the Recent Incidents
While compliance asks, “Have we satisfied the requirement?” risk management asks, “Have we meaningfully reduced the likelihood or consequence of a cyber incident?” These rarely produce the same answer. -
NewsISA Podcast Revisits the OT Cybersecurity Summit: Day One
The latest episode of Podomation shares highlights from the ISA OT Cybersecurity Summit, including the Cyber Empowerment Forum. -
NewsISA OT Cybersecurity Summit Hosted in Prague for 2026
The ISA OT Cybersecurity Summit had a 25.5% increase in attendance year over year, with 314 attendees, 41 speakers and 18 sponsors and exhibitors. -
FeatureEffective Cybersecurity Using ISA/IEC 62443
ISA/IEC 62443 provides a practical framework for aligning cybersecurity investments with operational risk, enabling organizations to build security programs that are measurable, sustainable and adaptable to changing threats. -
FeatureSimplifying Likelihood in OT Risk Assessments: A Practical ISA/IEC 62443 Perspective
Let's discuss a practical approach to simplify likelihood assessment in OT environments by defining it as a function of access exposure and exploitability. -
FeatureCompliant But Vulnerable: Why Cyber Resilience Is No Longer a Privilege
Morocco’s critical infrastructure operators are pushing toward digitalization. Beyond checking compliance boxes, what does it mean to have a facility that is truly cyber resilient? -
NewsISA OT Cybersecurity Summit Delivers Training and Two Tracks of Exceptional Speakers
Attendees can learn about cyber-physical security, industrial supply chain threats and mitigation and more, as well as attend certificate training courses. -
FeatureThe Unknown Risk: Are Your OT Devices Unintentionally Visible to Malicious People?
When an OT device becomes internet-exposed — directly or indirectly — it can shift from “hard-to-reach” to “continuously discoverable” for threat actors. -
FeatureThe Human Side of Industrial Cybersecurity, and Why Consultants Align With ISA/IEC 62443
ISA/IEC 62443 brings structure to cybersecurity work in a way that reflects how industrial environments actually function, how teams of real humans collaborate and how risk is experienced in the real world. -
FeatureUnderstanding and Defending Against Iranian Cyber Threats: An ISA/IEC 62443 Perspective
During the unprecedented escalation of the current 2026 cyber and kinetic war involving Iran, Israel and the United States, understanding the adversary's playbook is more critical than ever. -
FeatureISA/IEC 62443 in Four Practical Layers
ISA/IEC 62443 turns uncertainty into a navigable journey. -
FeatureAnnouncing the OT Security Knowledge Framework: A Guide for Educators & Students, Second Edition 2025
The OT Security Knowledge Framework: A Guide for Educators & Students, Second Edition 2025 can help universities build an OT cybersecurity program. -
FeatureFive Unique Challenges in Incident Response for Distributed Industrial Security Teams
Distributed industrial security teams protect systems where cyber incidents can have real-world consequences, often without being physically present. -
FeatureISA Global Cybersecurity Alliance (ISAGCA) Announces 2026 Advisory Board
The ISA Global Cybersecurity Alliance (ISAGCA) has announced members of its Advisory Board for the 2026 term. -
FeatureManaging Shadow AI and IT in Industrial Settings
The existence of shadow AI and IT poses security risks to industry by inadvertently allowing hackers unauthorized access to sensitive systems or databases. -
FeatureListen: A CISO's Guide to OT Security
Chris McLaughlin's new podcast on OT cybersecurity emphasizes a collaborative approach across IT and OT. -
FeatureHow to Secure the Digital Twins of Industrial Automation
Digital twins introduce new cybersecurity challenges that can threaten both virtual systems and physical infrastructure. -
FeatureWebinar Helps ISAGCA Community Navigate CRA and RED Requirements
FM Approvals joined ISAGCA to deliver an informative webinar called CRA and RED Explained: Compliance, Timelines and Impact. -
FeatureThe Rise of Adaptive Security: Cyber Defense in an Intelligent Age
Adaptive security leverages telemetry from endpoints, cloud workloads, network traffic and human behavior to adjust controls dynamically in real time. -
FeatureISA's New Position Paper Offers Stance on Industrial AI: Safety and Standards First
ISA's position paper on industrial AI outlines standards-first guidance, covering ISA/IEC 62443, operational benefits, risk and workforce upskilling. -
FeatureOvercoming 5 Challenges in Industrial Edge Security
Understanding security challenges in industrial edge computing can help teams develop practical solutions to protect organizational data and processes. -
Feature7 Practical Steps to Secure Multi-AI Deployments for IoT and ICS/SCADA
Organizations can set themselves up to prioritize security even when deploying multiple AI systems in industrial settings. -
FeatureHow to Secure Digital Twins in Manufacturing
Teams must protect digital twins from cyber threats to keep production safe and running and to defend valuable intellectual property and physical assets. -
FeatureImplementing Cyber Deception in Industrial Cybersecurity
Cyber deception strengthens security posture and reduces risk by diverting attackers away from critical assets. -
FeatureISA/IEC 62443 Cited in CISA OT Cybersecurity Guidance
ISA/IEC 62443 was cited in CISA's document called 'Foundations for OT Cybersecurity: Asset Inventory Guidance for Owners and Operators.' -
FeatureDetecting AI-Generated Phishing Attacks Targeting Industrial Control System Operators
ICS operators have become increasingly frequent targets of cyberattacks. What should decision-makers incorporate into training modules for ICS operators? -
FeatureThe Cyber Resilience Act (CRA), the Radio Equipment Directive (RED) and ISA/IEC 62443: July 2025 Update
This blog post focuses on recent regulatory and standards developments impacting OT (operational technology) cybersecurity in Europe as of July 2025. -
FeatureDefending Against Adversarial AI Attacks on Machine Vision Systems
Manufacturing lines now trust machine-vision models, but adversarial attacks may place organizations at risk. -
FeatureSecuring Manufacturing Lines from the Inside Out
As manufacturers embrace digitalization and OT convergence, their attack surface expands dramatically. -
FeatureUnderstanding the Relationship Between SEMI E187 and ISA/IEC 62443 in Equipment Security Implementation
This article explores the practical relationship between SEMI E187 and ISA/IEC 62443, highlighting areas of alignment as well as nuances where the standards partially overlap. -
FeatureReasons to Prioritize the 2025 ISA OT Cybersecurity Summit
The 2025 International Society of Automation (ISA) OT Cybersecurity Summit in Brussels, Belgium will help you stay ahead of the curve. -
FeatureNew Resource: Comparison of ISA/IEC 62443-4-1 and NIST SP 800-218, Secure Software Development Framework
A new document from ISAGCA and ISASecure compares the ISA/IEC 62443-4-1 standard with NIST SP 800-218, Secure Software Development Framework (SSDF). -
Feature9 SCADA System Vulnerabilities and How to Secure Them
This blog post presents nine common SCADA system vulnerabilities as well as a few strategies to secure them. -
FeatureIs Your OT Network Truly Secure? Here’s Why Active Directory Might Be Your Weakest Link
A single, flat Active Directory (AD) structure may expose your critical OT systems to cyber threats. -
Feature6 Cybersecurity Considerations When Configuring Industrial IoT Devices
Integrating industrial internet of things (IIoT) technology into industrial settings improves safety and increases productivity while introducing risks. -
FeatureIntegrating Machine Learning Techniques for Real-Time Industrial Threat Detection
Let's examine machine learning in industrial settings as applied to analyzing network data, detecting anomalies and responding to potential cyber threats. -
FeaturePlanned Plant Shutdowns: Cybersecurity Opportunities and Risks
It is essential to incorporate cybersecurity efforts into the planned plant shutdown process. -
FeatureConfronting the OWASP Top 10 OSS Risks for Industrial Automation Control Systems
We will discuss OWASP's 2024 “Top 10 Open Source Software Security Risks” in the context of industrial automation and control systems. -
FeatureThe Role of Data Destruction in Industrial Security
How can organizations ensure appropriate data destruction practices as part of a holistic cyber-physical security program? -
FeatureStrengthening Operational Technology Resilience: Nine Considerations
This article includes nine considerations for organizations beginning discussions around OT security and resilience. -
FeatureBuilding a Skilled Workforce to Meet the Demands of OT Cybersecurity
Businesses must consider how they can implement strategies to address the OT cybersecurity skills gap. -
FeatureDefending Against State-Sponsored Cyberattacks in 2025
State-sponsored cyberattacks and nation-state data breaches are on the rise in industrial sectors. How can cybersecurity professionals defend against them? -
FeatureWhat Does the Future of Zero Trust in OT Look Like?
The future of zero trust in OT will bring both enhanced security and utility. -
NewsSharing Insights on ISA/IEC 62443
Let's take a moment to recognize the significant growth in ISAGCA's awareness and outreach work as we look back at a small sample of media placements so far in 2024. -
FeatureWebinar: Securing Operations and Building Resilience in Critical Infrastructure
A recent ISAGCA webinar explored the concept of secure by operations. Clarified roles and responsibilities are key to success when securing operations. -
FeaturePractical Insights for Implementing Control System Security
Effective control system security is a continuous, evolving process that requires a combination of technical measures, user awareness and a structured approach to improvement. -
FeatureNorth American Electric Reliability Corporation Critical Infrastructure Protection (NERC CIP) and ISA/IEC 62443 Comparative Analysis
A new white paper shows that technical cybersecurity capabilities needed to comply with NERC CIP standards are substantially supported by ISA/IEC 62443. -
FeatureSecuring PLCs Through the Backplane: Balancing Performance and Simplicity
Advanced security features leveraging PLC backplane access protect industrial control systems at their core, although this approach brings challenges. -
FeatureInnovations in R&D: How AI Is Transforming Industrial Cybersecurity Operations
Advancements in AI are proving to have powerful potential for improving industrial cybersecurity operations. -
FeatureWebinar: Zero Trust Outcomes Using ISA/IEC 62443 Standards
The ISA Global Cybersecurity Alliance (ISAGCA) held a webinar on applying the ISA/IEC 62443 series standards and their significance in achieving a robust zero trust framework. -
FeatureImplementing AI Anomaly Detection in Industrial Cybersecurity
With the increased use of IoT in operational technology, businesses face greater risks from cyberattacks that can disrupt operations and compromise sensitive data. -
FeatureThe Encryption Enigma: Securing Automated Processes
With the convergence of IT and OT, "smart" automation has become the backbone of modern industries. -
FeatureLeverage Predictive Analytics to Identify Insider Threats in Smart Manufacturing
Predictive analytics technology forecasts outcomes and could be critical for early detection and intervention—but will it be enough? -
FeatureSpotlight on Cybersecurity Offerings at the 2024 ISA Automation Summit & Expo
The 2024 ISA Automation Summit & Expo offers a unique opportunity to learn about challenges and best practices involved in securing critical sectors. -
FeatureAddressing SCADA Access Control Challenges and Practical Solutions
Implementing access control in SCADA systems is challenging and often considered impractical due to the unique nature of industrial environments. -
FeatureEnhancing Cybersecurity Visibility in Industrial Control Systems (ICS)
Security engineers and cybersecurity professionals must work together to enhance cybersecurity visibility in the infrastructure sector. -
FeatureHow Digital Twins Improve Industrial Supply Chain Cybersecurity
Whether you want to secure board buy-in or convince your team implementing a digital twin is the right choice, consider turning industry success stories and relevant metrics into visuals. -
FeatureUniting Controls and OT Security Engineers for Stronger ICS Security
Controls engineers often face significant pressure when collaborating with OT cybersecurity teams due to several factors. -
FeatureThe Critical Role of BCP and DR Planning in OT Cybersecurity: Lessons from the CrowdStrike Incident
The importance of robust business continuity planning and disaster recovery strategies in OT environments has never been more apparent. -
FeatureNew ISAGCA Report Explores Zero Trust Outcomes in OT Cybersecurity
The ISA Global Cybersecurity Alliance released a white paper discussing outcomes of the zero trust model for cybersecurity in the context of OT and ICS. -
FeatureAddressing Cybersecurity Risks in Legacy OT Systems: A Practical Guide
To address these challenges, consider implementing strategies such as network segmentation, virtual patching, continuous monitoring and regular security audits. -
FeatureAI and Machine Learning in Automation: The Security Imperative
Let's explore the impact of AI and ML on control systems and automation, with a specific focus on the critical importance of security in this evolving landscape. -
FeatureWhat Are the Cybersecurity Needs of IIoT Systems?
ISA's new paper explores applying ISA/IEC 62443 standards to IACS with cloud-based functionality. ISAGCA and ISASecure hosted a companion webinar. -
FeatureImportance and Challenges of OT Patching in Line with ISA/IEC 62443-2-3
In the realm of Industrial Automation and Control Systems (IACS), effective patch management is critical, and it is governed by ISA/IEC 62443-2-3. -
FeatureEquipping Students and Educators with Industrial Cybersecurity Knowledge
The ISA Global Cybersecurity Alliance has released the Curricular Guidance: Industrial Cybersecurity Knowledge document. -
FeatureHow to Implement Adaptive Security in Your Organization
Whereas conventional methods build their protections around responding to incidents—internal or in other organizations—the adaptive approach proactively looks for new threats and opportunities to improve. -
FeatureIndustrial Control Systems Certification
An increasing number of intentional attacks are being detected that target industrial control systems (ICS). -
FeatureMost Cybersecurity Teams Are Unprepared for AI Cyberattacks
Cybersecurity teams aren’t the only ones using artificial intelligence to their advantage—cybercriminals are using this technology to launch never-before-seen cyberattacks, catching organizations off guard. -
FeatureProtecting Vital OT Infrastructure: Key Strategies for OT Penetration Testing
Cyberwarfare adversaries, such as APT groups, target OT systems for maximum impact, exploiting their vulnerabilities. -
FeatureHow to Implement Cybersecurity Automation in Education
The education system is one of those industries with abnormally high risk, making it all the more crucial to implement advanced security measures like automation. -
FeatureHow Machine Learning Revolutionizes Automation Security with AI-Powered Defense
Machine learning is sometimes considered a subset of overarching AI. But in the context of digital security, it may be better understood as a driving force, the fuel powering the engine. -
FeatureSPAN Ports and OT Continuous Monitoring: Securing Otherwise Insecure Network Traffic
Modern networking, SPAN port evolution and protocol interoperability paved the way for operational technology (OT) and ICS network monitoring and cybersecurity. -
FeatureISA/IEC 62443 and Risk Assessment: New Horizons in the AI Revolution
Within the realm of cybersecurity for IACS, risk assessment is deemed the most crucial action and the initial phase in ISA/IEC 62443. -
NewsShould ISA/IEC 62443 Security Level 2 Be the Minimum for COTS Components?
The ISA Security Compliance Institute asserts that commercial off the shelf components should be manufactured to a minimum of security level 2 as defined in the ISA/IEC 62443 series of standards. -
FeatureHow to Secure Machine Learning Data
Data security is paramount in machine learning, where knowledge drives innovation and decision-making. -
FeatureWhy Collaboration Is Essential for Cybersecurity Teams
Collaboration is essential for effective organization-wide security, yet teams overlook its importance far too often. This feature originally appeared on the ISA Global Cybersecurity Alliance blog. -
FeatureFortifying Your Security Arsenal: A Strategic Approach to Safeguarding OT Security Assets from Adversarial Threats
After every cyberattack breach, organizations often pose a crucial question to their cybersecurity teams: How were our systems hacked? -
FeatureThe Role of AI in Whistleblower Identity Protection and Incident Reporting
Artificial Intelligence—through machine learning and natural language processing—enhances the security and anonymity of whistleblowers. -
FeatureAI Revolution in OT Cybersecurity: Pen Testing and Forensics Unleashed
Integrating AI in digital forensics and penetration testing for OT systems offers substantial benefits. -
Feature7 Tips for Fraud Prevention for Multinational Companies
Fraud prevention is crucial for multinational companies as it safeguards their assets and ensures the trust of stakeholders. These companies' vast size, geographical spread, and diverse operations expose them to various fraud risks, from cyberattacks to internal misconduct -
FeatureStrategic Cybersecurity for Water Treatment Facilities
Water treatment facilities are experiencing more cyber incidents, leading to a rising need for robust, strategic security protocols -
FeatureHow to Maintain Security When Adding a Chatbot to Your Site
Should you embed chatbots on your website? Probably, but only after understanding the potential security risks and how to protect against them. -
FeatureEndpoint Detection and Response (EDR) Solutions for IT and OT/ICS
EDR solutions use Machine Learning, Artificial Intelligence, behavior analytics and threat intelligence to detect threats and neutralize existing attacks by actively blocking and or isolating endpoints. -
FeatureDo You Have a Cybersecurity Contingency Plan?
Whether it's a natural disaster or a planned attack, a contingency plan helps you safeguard your company's interests. -
Feature5 Benefits of Implementing Biometric Authentication in Cybersecurity
Cyberattacks and data breaches pose significant risks to exposed companies and individuals worldwide. Adopting a new cybersecurity solution like biometric authentication can provide peace of mind to users with improved functions and security features. -
FeatureBeyond Prediction: Discover the Unseen Layers of Generative AI
Generative AI, like ChatGPT, heralds a new age in enterprise technology, one that is ready to change the numerous layers of the corporate IT stack. -
FeatureGuiding Your Secure Development Lifecycle Journey with Frameworks and Standards
ISA/IEC 62443-4-1, originally designed for the rigorous needs of industrial controls and critical infrastructure, can be used as a strong companion to NIST's Secure Software Development Framework as a way to provide detailed guidance for SSDF's practices. -
FeatureThe Danger of Overreliance on Automation in Cybersecurity
Companies should have a healthy balance of tech and human talent when keeping systems safe. -
Feature5 Advanced Cyber Defense Strategies for Automated Operations
As automation technologies become increasingly integral to businesses, the need for effective cybersecurity grows. Cyber threats are always changing and can pose big risks to automated systems. -
FeatureHow to Manage Cybersecurity Automation Challenges
By automating repetitive and complex tasks, you can detect and respond to security incidents more swiftly. -
FeatureRole of Data Diodes in the Evolving Landscape of OT Cybersecurity
In this article, we'll discuss a powerful cybersecurity control—the Data Diode—that aligns well with the fundamental cybersecurity objectives in most typical OT environments.