©2026 Automation.com, a subsidiary of the International Society of Automation.
-
ISA provides technical resources and standards to help industrial automation professionals advance their careers and the field. We enable automation professionals worldwide to solve problems and enhance their skills by bringing people together to create new technologies and share best practices with future automation professionals.-
ISA Resources
-
Upcoming Events
-
Industry Insights
-
Consortia
-
ISA Global Cybersecurity Alliance
The ISA Global Cybersecurity Alliance (ISAGCA) is a collaborative forum to advance OT cybersecurity awareness, education, readiness, standardization and knowledge sharing. ISAGCA’s global ecosystem includes leaders such as Chevron, GSK, Trane Technologies, Honeywell, Johnson Controls, Schneider Electric, Rockwell Automation and Fortinet, among others. For more information, visit www.isagca.org.
230 Results Found
-
FeatureEU Cyber Resilience Act: Multiple Routes to Compliance, One Essential Starting Point—Risk Assessment
Although the final versions of the EN 62443 standards have not been released, manufacturers can use existing standards to start preparing to comply with them. -
NewsNineTenths Joins ISASecure to Advance Adoption of ISA/IEC 62443 Cybersecurity Standards
NineTenths to promote ISA/IEC 62443 to companies in Saudi Arabia and the Gulf Cooperation Council to guide them in adopting secure, cutting-edge technologies. -
NewsISA99 Committee Forms New Work Groups
ISA99 is forming work groups to review the effects of AI and supply chain requirements on IACS security. -
NewsOT Talent in APAC: Exploring Nontraditional Strategies and AI to Fill the Gaps
The ability to fill cybersecurity roles requires rethinking hiring strategies, investing in reskilling and implementing tools like AI. -
NewsAgilicus Joins ISA Global Cybersecurity Alliance to Accelerate Adoption of ISA/IEC 62443 Series of Standards
Agilicus and ISAGCA to work together to advance OT cybersecurity. -
NewsDeNexus Joins ISA Global Cybersecurity Alliance to Facilitate Broad Adoption of OT Cybersecurity Standards
The ISA/IEC 62443 framework, along with DeNexus’ expertise, will enable industries to assess, quantify and assign a cost to risk. -
FeatureSecuring America’s Water Systems: From Malicious Cyber Activity to Measurable Risk Reduction
Recent incidents have accelerated efforts to help water utilities improve their cybersecurity posture. One of the most significant is Project Watershed 250. -
FeatureA Look at Two Cyber Reporting Processes: EU CRA and US CIRCIA
Cyber incident reporting is entering a new phase on both sides of the Atlantic. -
White PaperFrom Compliance to Capability: A Practical SBOM Path for Industrial Small- and Medium-Sized Enterprises
For industrial small- and medium-sized enterprises (SMEs), the real challenge is not generating a software bill of materials (SBOM) once but maintaining trustworthy software composition data that supports vulnerability decisions throughout the product lifecycle. -
FeatureCybersecurity in US Water Systems: Lessons from the Recent Incidents
While compliance asks, “Have we satisfied the requirement?” risk management asks, “Have we meaningfully reduced the likelihood or consequence of a cyber incident?” These rarely produce the same answer. -
NewsISA Podcast Revisits the OT Cybersecurity Summit: Day One
The latest episode of Podomation shares highlights from the ISA OT Cybersecurity Summit, including the Cyber Empowerment Forum. -
NewsISA OT Cybersecurity Summit Hosted in Prague for 2026
The ISA OT Cybersecurity Summit had a 25.5% increase in attendance year over year, with 314 attendees, 41 speakers and 18 sponsors and exhibitors. -
FeatureEffective Cybersecurity Using ISA/IEC 62443
ISA/IEC 62443 provides a practical framework for aligning cybersecurity investments with operational risk, enabling organizations to build security programs that are measurable, sustainable and adaptable to changing threats. -
FeatureSimplifying Likelihood in OT Risk Assessments: A Practical ISA/IEC 62443 Perspective
Let's discuss a practical approach to simplify likelihood assessment in OT environments by defining it as a function of access exposure and exploitability. -
FeatureCompliant But Vulnerable: Why Cyber Resilience Is No Longer a Privilege
Morocco’s critical infrastructure operators are pushing toward digitalization. Beyond checking compliance boxes, what does it mean to have a facility that is truly cyber resilient? -
NewsISA OT Cybersecurity Summit Delivers Training and Two Tracks of Exceptional Speakers
Attendees can learn about cyber-physical security, industrial supply chain threats and mitigation and more, as well as attend certificate training courses. -
FeatureThe Unknown Risk: Are Your OT Devices Unintentionally Visible to Malicious People?
When an OT device becomes internet-exposed — directly or indirectly — it can shift from “hard-to-reach” to “continuously discoverable” for threat actors. -
FeatureThe Human Side of Industrial Cybersecurity, and Why Consultants Align With ISA/IEC 62443
ISA/IEC 62443 brings structure to cybersecurity work in a way that reflects how industrial environments actually function, how teams of real humans collaborate and how risk is experienced in the real world. -
FeatureUnderstanding and Defending Against Iranian Cyber Threats: An ISA/IEC 62443 Perspective
During the unprecedented escalation of the current 2026 cyber and kinetic war involving Iran, Israel and the United States, understanding the adversary's playbook is more critical than ever. -
FeatureISA/IEC 62443 in Four Practical Layers
ISA/IEC 62443 turns uncertainty into a navigable journey. -
FeatureAnnouncing the OT Security Knowledge Framework: A Guide for Educators & Students, Second Edition 2025
The OT Security Knowledge Framework: A Guide for Educators & Students, Second Edition 2025 can help universities build an OT cybersecurity program. -
FeatureFive Unique Challenges in Incident Response for Distributed Industrial Security Teams
Distributed industrial security teams protect systems where cyber incidents can have real-world consequences, often without being physically present. -
FeatureISA Global Cybersecurity Alliance (ISAGCA) Announces 2026 Advisory Board
The ISA Global Cybersecurity Alliance (ISAGCA) has announced members of its Advisory Board for the 2026 term. -
FeatureManaging Shadow AI and IT in Industrial Settings
The existence of shadow AI and IT poses security risks to industry by inadvertently allowing hackers unauthorized access to sensitive systems or databases. -
FeatureListen: A CISO's Guide to OT Security
Chris McLaughlin's new podcast on OT cybersecurity emphasizes a collaborative approach across IT and OT. -
FeatureHow to Secure the Digital Twins of Industrial Automation
Digital twins introduce new cybersecurity challenges that can threaten both virtual systems and physical infrastructure. -
FeatureWebinar Helps ISAGCA Community Navigate CRA and RED Requirements
FM Approvals joined ISAGCA to deliver an informative webinar called CRA and RED Explained: Compliance, Timelines and Impact. -
FeatureThe Rise of Adaptive Security: Cyber Defense in an Intelligent Age
Adaptive security leverages telemetry from endpoints, cloud workloads, network traffic and human behavior to adjust controls dynamically in real time. -
FeatureISA's New Position Paper Offers Stance on Industrial AI: Safety and Standards First
ISA's position paper on industrial AI outlines standards-first guidance, covering ISA/IEC 62443, operational benefits, risk and workforce upskilling. -
FeatureOvercoming 5 Challenges in Industrial Edge Security
Understanding security challenges in industrial edge computing can help teams develop practical solutions to protect organizational data and processes. -
Feature7 Practical Steps to Secure Multi-AI Deployments for IoT and ICS/SCADA
Organizations can set themselves up to prioritize security even when deploying multiple AI systems in industrial settings. -
FeatureHow to Secure Digital Twins in Manufacturing
Teams must protect digital twins from cyber threats to keep production safe and running and to defend valuable intellectual property and physical assets. -
FeatureImplementing Cyber Deception in Industrial Cybersecurity
Cyber deception strengthens security posture and reduces risk by diverting attackers away from critical assets. -
FeatureISA/IEC 62443 Cited in CISA OT Cybersecurity Guidance
ISA/IEC 62443 was cited in CISA's document called 'Foundations for OT Cybersecurity: Asset Inventory Guidance for Owners and Operators.' -
FeatureDetecting AI-Generated Phishing Attacks Targeting Industrial Control System Operators
ICS operators have become increasingly frequent targets of cyberattacks. What should decision-makers incorporate into training modules for ICS operators? -
FeatureThe Cyber Resilience Act (CRA), the Radio Equipment Directive (RED) and ISA/IEC 62443: July 2025 Update
This blog post focuses on recent regulatory and standards developments impacting OT (operational technology) cybersecurity in Europe as of July 2025. -
FeatureDefending Against Adversarial AI Attacks on Machine Vision Systems
Manufacturing lines now trust machine-vision models, but adversarial attacks may place organizations at risk. -
FeatureSecuring Manufacturing Lines from the Inside Out
As manufacturers embrace digitalization and OT convergence, their attack surface expands dramatically. -
FeatureUnderstanding the Relationship Between SEMI E187 and ISA/IEC 62443 in Equipment Security Implementation
This article explores the practical relationship between SEMI E187 and ISA/IEC 62443, highlighting areas of alignment as well as nuances where the standards partially overlap. -
FeatureReasons to Prioritize the 2025 ISA OT Cybersecurity Summit
The 2025 International Society of Automation (ISA) OT Cybersecurity Summit in Brussels, Belgium will help you stay ahead of the curve. -
FeatureNew Resource: Comparison of ISA/IEC 62443-4-1 and NIST SP 800-218, Secure Software Development Framework
A new document from ISAGCA and ISASecure compares the ISA/IEC 62443-4-1 standard with NIST SP 800-218, Secure Software Development Framework (SSDF). -
Feature9 SCADA System Vulnerabilities and How to Secure Them
This blog post presents nine common SCADA system vulnerabilities as well as a few strategies to secure them. -
FeatureIs Your OT Network Truly Secure? Here’s Why Active Directory Might Be Your Weakest Link
A single, flat Active Directory (AD) structure may expose your critical OT systems to cyber threats. -
Feature6 Cybersecurity Considerations When Configuring Industrial IoT Devices
Integrating industrial internet of things (IIoT) technology into industrial settings improves safety and increases productivity while introducing risks. -
FeatureIntegrating Machine Learning Techniques for Real-Time Industrial Threat Detection
Let's examine machine learning in industrial settings as applied to analyzing network data, detecting anomalies and responding to potential cyber threats. -
FeaturePlanned Plant Shutdowns: Cybersecurity Opportunities and Risks
It is essential to incorporate cybersecurity efforts into the planned plant shutdown process. -
FeatureConfronting the OWASP Top 10 OSS Risks for Industrial Automation Control Systems
We will discuss OWASP's 2024 “Top 10 Open Source Software Security Risks” in the context of industrial automation and control systems. -
FeatureThe Role of Data Destruction in Industrial Security
How can organizations ensure appropriate data destruction practices as part of a holistic cyber-physical security program? -
FeatureStrengthening Operational Technology Resilience: Nine Considerations
This article includes nine considerations for organizations beginning discussions around OT security and resilience. -
FeatureBuilding a Skilled Workforce to Meet the Demands of OT Cybersecurity
Businesses must consider how they can implement strategies to address the OT cybersecurity skills gap. -
FeatureDefending Against State-Sponsored Cyberattacks in 2025
State-sponsored cyberattacks and nation-state data breaches are on the rise in industrial sectors. How can cybersecurity professionals defend against them? -
FeatureWhat Does the Future of Zero Trust in OT Look Like?
The future of zero trust in OT will bring both enhanced security and utility. -
NewsSharing Insights on ISA/IEC 62443
Let's take a moment to recognize the significant growth in ISAGCA's awareness and outreach work as we look back at a small sample of media placements so far in 2024. -
FeatureWebinar: Securing Operations and Building Resilience in Critical Infrastructure
A recent ISAGCA webinar explored the concept of secure by operations. Clarified roles and responsibilities are key to success when securing operations. -
FeaturePractical Insights for Implementing Control System Security
Effective control system security is a continuous, evolving process that requires a combination of technical measures, user awareness and a structured approach to improvement. -
FeatureNorth American Electric Reliability Corporation Critical Infrastructure Protection (NERC CIP) and ISA/IEC 62443 Comparative Analysis
A new white paper shows that technical cybersecurity capabilities needed to comply with NERC CIP standards are substantially supported by ISA/IEC 62443. -
FeatureSecuring PLCs Through the Backplane: Balancing Performance and Simplicity
Advanced security features leveraging PLC backplane access protect industrial control systems at their core, although this approach brings challenges. -
FeatureInnovations in R&D: How AI Is Transforming Industrial Cybersecurity Operations
Advancements in AI are proving to have powerful potential for improving industrial cybersecurity operations. -
FeatureWebinar: Zero Trust Outcomes Using ISA/IEC 62443 Standards
The ISA Global Cybersecurity Alliance (ISAGCA) held a webinar on applying the ISA/IEC 62443 series standards and their significance in achieving a robust zero trust framework. -
FeatureImplementing AI Anomaly Detection in Industrial Cybersecurity
With the increased use of IoT in operational technology, businesses face greater risks from cyberattacks that can disrupt operations and compromise sensitive data. -
FeatureThe Encryption Enigma: Securing Automated Processes
With the convergence of IT and OT, "smart" automation has become the backbone of modern industries. -
FeatureLeverage Predictive Analytics to Identify Insider Threats in Smart Manufacturing
Predictive analytics technology forecasts outcomes and could be critical for early detection and intervention—but will it be enough? -
FeatureSpotlight on Cybersecurity Offerings at the 2024 ISA Automation Summit & Expo
The 2024 ISA Automation Summit & Expo offers a unique opportunity to learn about challenges and best practices involved in securing critical sectors. -
FeatureAddressing SCADA Access Control Challenges and Practical Solutions
Implementing access control in SCADA systems is challenging and often considered impractical due to the unique nature of industrial environments. -
FeatureEnhancing Cybersecurity Visibility in Industrial Control Systems (ICS)
Security engineers and cybersecurity professionals must work together to enhance cybersecurity visibility in the infrastructure sector. -
FeatureHow Digital Twins Improve Industrial Supply Chain Cybersecurity
Whether you want to secure board buy-in or convince your team implementing a digital twin is the right choice, consider turning industry success stories and relevant metrics into visuals. -
FeatureUniting Controls and OT Security Engineers for Stronger ICS Security
Controls engineers often face significant pressure when collaborating with OT cybersecurity teams due to several factors. -
FeatureThe Critical Role of BCP and DR Planning in OT Cybersecurity: Lessons from the CrowdStrike Incident
The importance of robust business continuity planning and disaster recovery strategies in OT environments has never been more apparent. -
FeatureNew ISAGCA Report Explores Zero Trust Outcomes in OT Cybersecurity
The ISA Global Cybersecurity Alliance released a white paper discussing outcomes of the zero trust model for cybersecurity in the context of OT and ICS. -
FeatureAddressing Cybersecurity Risks in Legacy OT Systems: A Practical Guide
To address these challenges, consider implementing strategies such as network segmentation, virtual patching, continuous monitoring and regular security audits. -
FeatureAI and Machine Learning in Automation: The Security Imperative
Let's explore the impact of AI and ML on control systems and automation, with a specific focus on the critical importance of security in this evolving landscape. -
FeatureWhat Are the Cybersecurity Needs of IIoT Systems?
ISA's new paper explores applying ISA/IEC 62443 standards to IACS with cloud-based functionality. ISAGCA and ISASecure hosted a companion webinar. -
FeatureImportance and Challenges of OT Patching in Line with ISA/IEC 62443-2-3
In the realm of Industrial Automation and Control Systems (IACS), effective patch management is critical, and it is governed by ISA/IEC 62443-2-3. -
FeatureEquipping Students and Educators with Industrial Cybersecurity Knowledge
The ISA Global Cybersecurity Alliance has released the Curricular Guidance: Industrial Cybersecurity Knowledge document. -
FeatureHow to Implement Adaptive Security in Your Organization
Whereas conventional methods build their protections around responding to incidents—internal or in other organizations—the adaptive approach proactively looks for new threats and opportunities to improve. -
FeatureIndustrial Control Systems Certification
An increasing number of intentional attacks are being detected that target industrial control systems (ICS). -
FeatureMost Cybersecurity Teams Are Unprepared for AI Cyberattacks
Cybersecurity teams aren’t the only ones using artificial intelligence to their advantage—cybercriminals are using this technology to launch never-before-seen cyberattacks, catching organizations off guard. -
FeatureProtecting Vital OT Infrastructure: Key Strategies for OT Penetration Testing
Cyberwarfare adversaries, such as APT groups, target OT systems for maximum impact, exploiting their vulnerabilities. -
FeatureHow to Implement Cybersecurity Automation in Education
The education system is one of those industries with abnormally high risk, making it all the more crucial to implement advanced security measures like automation. -
FeatureHow Machine Learning Revolutionizes Automation Security with AI-Powered Defense
Machine learning is sometimes considered a subset of overarching AI. But in the context of digital security, it may be better understood as a driving force, the fuel powering the engine. -
FeatureSPAN Ports and OT Continuous Monitoring: Securing Otherwise Insecure Network Traffic
Modern networking, SPAN port evolution and protocol interoperability paved the way for operational technology (OT) and ICS network monitoring and cybersecurity. -
FeatureISA/IEC 62443 and Risk Assessment: New Horizons in the AI Revolution
Within the realm of cybersecurity for IACS, risk assessment is deemed the most crucial action and the initial phase in ISA/IEC 62443. -
NewsShould ISA/IEC 62443 Security Level 2 Be the Minimum for COTS Components?
The ISA Security Compliance Institute asserts that commercial off the shelf components should be manufactured to a minimum of security level 2 as defined in the ISA/IEC 62443 series of standards. -
FeatureHow to Secure Machine Learning Data
Data security is paramount in machine learning, where knowledge drives innovation and decision-making. -
FeatureWhy Collaboration Is Essential for Cybersecurity Teams
Collaboration is essential for effective organization-wide security, yet teams overlook its importance far too often. This feature originally appeared on the ISA Global Cybersecurity Alliance blog. -
FeatureFortifying Your Security Arsenal: A Strategic Approach to Safeguarding OT Security Assets from Adversarial Threats
After every cyberattack breach, organizations often pose a crucial question to their cybersecurity teams: How were our systems hacked? -
FeatureThe Role of AI in Whistleblower Identity Protection and Incident Reporting
Artificial Intelligence—through machine learning and natural language processing—enhances the security and anonymity of whistleblowers. -
FeatureAI Revolution in OT Cybersecurity: Pen Testing and Forensics Unleashed
Integrating AI in digital forensics and penetration testing for OT systems offers substantial benefits. -
Feature7 Tips for Fraud Prevention for Multinational Companies
Fraud prevention is crucial for multinational companies as it safeguards their assets and ensures the trust of stakeholders. These companies' vast size, geographical spread, and diverse operations expose them to various fraud risks, from cyberattacks to internal misconduct -
FeatureStrategic Cybersecurity for Water Treatment Facilities
Water treatment facilities are experiencing more cyber incidents, leading to a rising need for robust, strategic security protocols -
FeatureHow to Maintain Security When Adding a Chatbot to Your Site
Should you embed chatbots on your website? Probably, but only after understanding the potential security risks and how to protect against them. -
FeatureEndpoint Detection and Response (EDR) Solutions for IT and OT/ICS
EDR solutions use Machine Learning, Artificial Intelligence, behavior analytics and threat intelligence to detect threats and neutralize existing attacks by actively blocking and or isolating endpoints. -
FeatureDo You Have a Cybersecurity Contingency Plan?
Whether it's a natural disaster or a planned attack, a contingency plan helps you safeguard your company's interests. -
Feature5 Benefits of Implementing Biometric Authentication in Cybersecurity
Cyberattacks and data breaches pose significant risks to exposed companies and individuals worldwide. Adopting a new cybersecurity solution like biometric authentication can provide peace of mind to users with improved functions and security features. -
FeatureBeyond Prediction: Discover the Unseen Layers of Generative AI
Generative AI, like ChatGPT, heralds a new age in enterprise technology, one that is ready to change the numerous layers of the corporate IT stack. -
FeatureGuiding Your Secure Development Lifecycle Journey with Frameworks and Standards
ISA/IEC 62443-4-1, originally designed for the rigorous needs of industrial controls and critical infrastructure, can be used as a strong companion to NIST's Secure Software Development Framework as a way to provide detailed guidance for SSDF's practices. -
FeatureThe Danger of Overreliance on Automation in Cybersecurity
Companies should have a healthy balance of tech and human talent when keeping systems safe. -
Feature5 Advanced Cyber Defense Strategies for Automated Operations
As automation technologies become increasingly integral to businesses, the need for effective cybersecurity grows. Cyber threats are always changing and can pose big risks to automated systems. -
FeatureHow to Manage Cybersecurity Automation Challenges
By automating repetitive and complex tasks, you can detect and respond to security incidents more swiftly. -
FeatureRole of Data Diodes in the Evolving Landscape of OT Cybersecurity
In this article, we'll discuss a powerful cybersecurity control—the Data Diode—that aligns well with the fundamental cybersecurity objectives in most typical OT environments. -
FeatureHow Cybersecurity Automation Helps Navigate Compliance Challenges
Compliance standards certify businesses are at peak protection and performing per the law. -
FeaturePETRONAS Leverages ISA IEC 62443 in Enterprise Risk Management
PETRONAS seeks energy potential across the globe, optimizing value through an integrated business model. -
FeatureICS Cybersecurity Risk Assessment
ICS are connected to computer networks, which in turn are connected to the internet and are employed to control equipment and safeguard people, plant and environment. -
FeatureUse AI to Automate Threat Hunting and Analysis
Unlike other modern technologies, artificial intelligence (AI) is autonomous and adaptive — meaning you can use it to automate your threat-hunting process. -
FeatureHow Are You Using ISA/IEC 62443?
ISAGCA would like to get a better idea of how its parties are using ISA/IEC 62443 with a brief yet comprehensive survey -
FeatureHow Ransomware Can Evade Antivirus Software
Even if you have up-to-date antivirus software, there’s still a chance ransomware can infect your computer. If cybercriminals know what they’re doing, they can easily evade scans and bypass your protections. -
FeatureBeyond SDL: Elevating Cybersecurity with Secure Lifecycle Management
Schneider Electric has worldwide manufacturing centers that support critical infrastructures for customers in industries such as energy, government, healthcare, food, and others that are vital to everyday life around the globe -
FeaturexDR in Operational Technology: Approach and Adaption
Operational technology (OT) is the backbone of automation, manufacturing systems and other utilities, communication systems, building automation, physical security systems, vehicle controls, and more -
FeatureDo You Have a Set Procedure for Reporting a Data Breach?
In today’s technology world, businesses face the reality that a cyberattack can occur any time. When these attacks do take place, they often result in a data breach. Having the right procedures in place is vital for overcoming this disastrous event. -
FeatureHow Hospital IT Security Compares to Industrial Automation Control System Security
How does hospital IT security compare to industrial automation control system security? Let's take a look. -
Feature8 Best Use Cases for Robotic Process Automation in Cybersecurity
Robotic process automation (RPA) in cybersecurity is an incredibly helpful tool. While automation can significantly improve how secure organizations are, this technology has many unique benefits like security. -
FeatureThe Air Gap: Myth and Reality
The myths and realities of the air gap- including insider threats, physical compromise, and IIoT -
FeatureWhat is ETHOS and Why Now? How Will it Help Critical Infrastructure?
ETHOS is dissected, including the background, information sharing challenges and trends, as well as benefits -
FeatureKey Features to Look For in a SOAR Solution
Key features to look for in a SOAR solution, including scalability, customization, and ease of integration -
NewsSuccessful Cybersecurity Summit Brings 120+ Technical Leaders to Aberdeen
The International Society of Automation (ISA), which sets the standard for automation, welcomed more than 120 training and conference delegates to Aberdeen this week. -
FeatureHow to Protect Sensitive Health-Related Information Against Cyberattacks
Learn how to protect sensitive health-related information against cyberattacks, including authentication/authorization, going password-less, and MFA -
FeatureMetal Fabricators Must Protect Themselves from Cyberattacks
Learn how metal fabricators must protect themselves from cyberattacks, including the manufacturing landscape, the impact of breaches, and prioritizing protective measures -
FeatureIIoT Cybersecurity Explained
IIOT Cybersecurity is explained, including security planning, network design, cloud security, certification, and more. -
FeatureCybersecurity Luminaries and Leaders to speak at ISA OT Cybersecurity Summit
A description of each knowledgeable speaker taking the stage at the inaugural OT Cybersecurity summit in Aberdeen, Scotland, as well as summit expectations. -
FeatureHow Ransomware Gangs Automate Their Attacks
Learn about automated reconnaissance, phishing, and propagation to defend against automated ransomware and cybercriminals. -
FeatureCombine Machine Learning and UEBA for Advanced Threat Detection
Combine machine learning and UEBA for advanced threat detection discussing insider threats, faster incident responses, and fewer errors. -
FeatureBest Practices in Multi-factor Authentication and Allowlisting in OT Environments
LOGIIC (Linking the Oil and Gas Industry to Improve Cybersecurity) reports on how asset owners approach Multi-Factor Authentication and Allowlisting. -
FeatureEmbracing Zero Trust: Least-Privilege Access
Least-Privilege Access ensures that users only have access to exactly what they need — nothing more, nothing less. -
FeatureMore Than 17 Million Control System Cyber Incidents are Hidden in Plain Sight
The author describes a database of control system cyber incidents he has had in development since 2000 for helping electric utility companies. -
FeatureHow ChatGPT is Impacting Cybersecurity
Tangible benefits and repercussions of ChatGPT in cybersecurity are becoming more visible. -
FeatureDouble Extortion Ransomware: What It Is and How to Respond
Follow these recovery tips and prevention strategies to protect your organization. -
FeatureDefending Remote-Friendly Environments from Cyberattacks
Use layered defenses to provide cybersecurity for remote OT assets. -
FeatureLeveraging ISA/IEC 62443 is Easier Than You Think
Learn about the ISA/IEC 62443-3-3 OT security standard and how to easily implement it. -
FeatureThe Adoption of ISA/IEC 62443 as a Malaysian Standard
The authors share their experience of adopting ISA/IEC 62443 standards as part of Malaysian Standards. -
FeatureISA/IEC 62443 Referenced in CISA’s Cross-Sector CPGs
These CPGs extensively reference ISA/IEC 62443-2-1 and ISA/IEC 62443-3-3 in almost every category. -
FeatureOT & IoT Cybersecurity: Marriage of Digital Factories & Cybersecurity
Monitoring smart systems and managing risk become more essential as connected systems proliferate. -
FeatureIs Employee Burnout a Threat to Your Organization’s Cybersecurity?
Employee burnout is a threat to your organization, and there are a couple of reasons why this could be the case. -
FeatureCybersecurity Perspectives: Education for an Evolving, Digital World
Cybersecurity Perspectives is a global forum and educational program designed to help advance IIoT cybersecurity. -
FeatureCyber-Related Process Hazard Analysis
How Shell conducts cyber PHA assessments based on ISA-TR84.00.09. -
FeatureIndustrial Cybersecurity Mistakes to Avoid in the New Normal
The ongoing pandemic has created a reevaluation for cybersecurity programs and planning in many organizations. -
Feature5 Tips to Protect Your Business from Cybercrime
The best way to protect your business from cybercrime is to create a cybersecurity mitigation plan. -
FeatureRansomware Resiliency for Storage & Backup: Trends, Threats, and Tips
Ransomware has evolved into a fully-fledged industry, with competing groups that continually introduce new capabilities and techniques. -
FeaturePhysical Security of a Data Center
In addition to many layers of software cybersecurity, protect data centers with layers of physical security systems. -
FeatureCybersecurity Risk is the Great Equalizer
Effective response to cyber risk requires a multidisciplinary approach. Standards are essential but must be accompanied by practical guidance and examples. -
FeatureSecuring Your Operations? Don't Forget Your Hardware
The IACS industry has developed a comprehensive framework that lays out the best practices for robust industrial cybersecurity for both vendors and users. -
FeatureWhy ICS/OT Infrastructure is Insecure
Implementing cybersecurity solutions to secure OT infrastructure is a very crucial task. -
FeatureThe Future of the SOC: SOCaaS
SOCaaS is a wide-open market, and we do not have a global player yet. -
FeatureBuzzworthy Takeaways from the 2022 RSA Conference
Here are the top three themes that stood out. -
FeatureISA Leads Development of Electric Energy OT Security Profile for 62443
The US DOE, global equipment suppliers, and other stakeholders announced the establishment of the Electric Energy OT Security Profile working group. -
FeatureElectrical Panel Connectivity
To ensure that the electrical interfaces between panels and field wiring perform reliably, panel designers need to consider the best connectivity options. -
FeatureThe ICS Periodic Table
This ICS periodic table depicts the chemistry of all the control elements which enables the security around the OT estate for any organization. -
FeatureWhy Network Discovery is Critical in the ICS/IACS Environment
To structure this environment, what is required to have exact reflection of inventory almost in real-time and network discovery comes into light. -
-
FeatureExperience Centers Teach Cybersecurity Best Practices
By learning about and building cyber-physical protection systems into modern ICS deployments, organizations can better defend their control systems from internal and external threats. This piece was originally published in the April edition of InTech magazine. -
FeatureUnderstanding Railway Cybersecurity
Railway systems, which have been considered safe for decades, can now be compromised by newly introduced digital commands. -
FeatureISA Launches New Microlearning Modules for CISOs
The awareness videos are designed to help gain more insight and understanding of ISA/IEC 62443. -
FeatureWhy Your Business Needs a Bespoke Security Strategy
Businesses need video surveillance and security systems for a variety of different reasons. -
FeatureMSDR3: Monitor, Security, Data Retention, Retrieval and Redundancy
There is a need for evolution regarding our methods of data handling -
FeatureExcerpt: SBoM is Crucial in Software Development
An excerpt of the ISS Source article, written by ISAGCA member Cassie Crossley. -
FeatureSeparating Man from Machine: KVM Reduces Security Threats
Cybersecurity is an important aspect that KVM solutions allow to make installations more secure. -
FeatureICS Cybersecurity Resilience and the Importance of Remote Laboratory
The digital transformation of industries is having a profound impact in ICS. -
FeatureAutomation Products and Services: Focus on Cybersecurity
Products from Lanner, aeSolutions, and Rockwell are featured in this roundup. -
FeatureCybersecurity Using ICS ATT&CK Strategies
Protect smart manufacturing and IIoT systems using a security framework that presents information in matrices arranged by attack stages. -
FeatureLog4J Vulnerability: What, Why and How
This vulnerability allows attackers to remotely control and execute code on vulnerable machines. -
FeatureThe Open Secret—A Shared Legacy
Demand better of your suppliers, because in this world safety relies on security. -
FeatureWhite Paper Excerpt: Implementing an IACS Cybersecurity Program
The IACS white paper is intended to address the needs of owner/operators of industrial facilities. -
FeatureAutomation Systems Cybersecurity: From Standards to Practices
Cybersecurity practices will ultimately be determined by asset owners. -
FeatureA Look at the Industrial Cybersecurity (ICS) Knowledge Survey
The survey is designed to determine a reasonable foundational set of knowledge needed to secure control systems. -
FeatureIEC Designates ISA/IEC 62443 as a Horizontal Standard
The designation of ISA/IEC 62443 as a horizontal standard will have many benefits to many different vendor stakeholders. -
FeatureArchitecture vs. Design
Distinguishing between design and architecture is very important for any project. -
FeatureExcerpt: LOGIIC's Project 12 Safety Instrumentation Report
Read an excerpt from LOGIIC's April 2021 report: Project 12 Safety Instrumentation. -
Feature7 Practices to Help You Become Security Conscious
Check to see if you're following these seven principles to good cybersecurity. -
FeatureSecuring Energy Infrastructure from Cyber Threats
How software in energy infrastructure can be better secured from cyber threats. -
FeatureCall for Volunteers: ICS4ICS Improves Management of ICS Cybersecurity
Participate in the ICS4ICS effort today! -
FeatureThe Problem with Platform Ascendency for Cyber-Physical Integrations
Data integration requires understanding every layer of connectivity and the utility derived from increased digital complexity. -
FeatureNew York Lawmakers Reference ISA/IEC 62443 in New Proposed Bill
A new cybersecurity bill proposed in New York could soon mean enhanced critical infrastructure security for the state. -
FeatureA Practical Approach to Adopting the IEC 62443 Standards
This blog summarizes the key points for the IEC 62443 standards and provides recommendations for CSMS development. -
FeatureCybersecurity Investment Tax Credits
The government should create cybersecurity investment tax credits for industry to stimulate more protection. This article was originally published in InTech's July/August issue. -
FeatureCybersecurity Preparedness Depends on Procedures and Infrastructure
Controllers and smart devices are being created with cybersecurity in mind, but these products do not compensate for underlying infrastructure vulnerabilities. This article was originally published in InTech's July/August issue. -
FeatureCybersecurity Incidents Can Be Prevented
A review of recent cybersecurity incidents that impacted critical infrastructure, and how the ISA/IEC 62443 series of standards thwarted many of them. -
FeatureISAGCA Chairperson Megan Samford Talks OT Cybersecurity With NasdaqTV
ISA Global Cybersecurity Alliance Chairperson Megan Samford recently sat down for this interview with NasdaqTV's TradeTalks. -
FeatureIT-OT Convergence: Managing the Cybersecurity Risks
Why the implementation of cybersecurity processes are important when managing IT/OT convergence. -
FeatureAccelerating Cybersecurity Culture Maturity in the Workplace
Sharul A. Rashid of PETRONAS gives us a few examples of how his company institutes a hard-working cybersecurity culture in the workplace. -
FeatureISAGCA Members Selected to Expert Panel in Singapore
The international Operational Technology Cybersecurity Expert Panel will plan to discuss numerous issues surrounding cybersecurity. -
FeatureTop 20 Secure PLC Coding Practices Available Now
Download the Top 20 Secure PLC Coding Practices document today! -
FeatureWhy is Change Management Important to Automation and Cybersecurity?
Implementing change management practices within the automation and cybersecurity realm. -
FeatureProtecting Africa's Critical Infrastructure: The Adoption of ISA/IEC
How the adoption of ISA/IEC 62443 could wholly benefit critical infrastructure in African institutions. -
FeatureCan a Solution Provider Handle Industrial Cybersecurity?
Consider these key questions to help ensure you choose a qualified solution provider. This article comes from the Ebook Automation 2021: OT/ICS Cybersecurity. -
-
FeatureAddressing the Downstream Effect of a Cyber Attack
Seeing the full ripple effect of a cyberattack, it becomes more evident that increasing overall resilience requires a whole of community approach. -
FeatureThe Colonial Pipeline Cyberattack: What We Know So Far
A look at what we know so far about the Colonial Pipeline cyberattack, with comments from some of ISAGCA's member companies. -
FeatureGetting Started With Cybersecurity Risk Assessment: When It’s Not About Information Technology
In any industry that uses industrial automated control systems (IACS), the potential consequences due to cyber-attacks range widely. -
FeatureLOGIIC 12 Report Provides Roadmap for Risk Mitigations
LOGIIC’s recently released Project 12, Safety Instrumentation and Management, highlights exploitable weaknesses and provides a roadmap for risk mitigations. -
FeatureThe Top 7 Operational Technology Patch Management Best Practices
Introduction – A Risk Based Approach to Patch Management -
FeatureISA/IEC 62443 Cybersecurity Standards Hit Their Stride
The ISA/IEC 62443 series of cybersecurity standards are finding their place among the essential building blocks of a secure industrial control system. -
FeatureOT/ICS Cybersecurity Voices: A Video Interview with Lesley Carhart
The ISA Global Cybersecurity Alliance (ISAGCA) interviews Lesley Carhart, principal incident responder at Dragos, on OT/ICS cybersecurity trends. -
FeatureWhat Are the First Steps to Protect ICS Assets from Existing Cyber Threats?
Protecting ICS assets from cyber threats starts by strengthening access and use controls, as well as improving employee training and awareness. -
FeatureThe Connection Between Cybersecurity and Safety
Risk assessment and risk management bridge the worlds of OT/ICS cybersecurity and safety. -
FeatureWhat COVID-19 Taught Us About Cyber Risk Management
COVID-19 has been an object lesson in risk management and continuity planning, especially in terms of cybersecurity, for many businesses around the world. -
FeatureThe Top 3 Cybersecurity Issues for Industrial Control Systems in 2021
ICS security leaders and security operations centers face three major hurdles in 2021. -
FeatureManage Vulnerabilities in ICS Open Source Software
Ensuring high-quality code in open source software to avoid an increased cyber risk to industrial control systems is becoming a pivotal challenge. -
FeatureWhat Does the Florida Water Supply Incident Mean for ICS Cybersecurity?
ICS cybersecurity experts weigh in on the February 2021 breach of a water treatment plant in Oldsmar, Florida. -
FeatureISA99 Virtual Plenary Meetings: Behind the Scenes of ISA/IEC 62443
At ISA99 meetings in October 2020, committee members clarified several aspects of the ISA/IEC 62443 standards for automation cybersecurity. -
FeatureJump-Start the Cyber Insurance Market to Drive Better OT Security
A recent report states that the cyber insurance market is not maturing fast enough to adequately drive better risk management in the private sector. -
FeatureTake the Next Step in OT Cybersecurity Journey with Asset Visibility
How can organizations effectively obtain the right amount of asset visibility to ensure continued safety and reliability within their ICS environment?