Securing Safety Instrumented Systems

In the previous chapter, we explored the multifaceted attack landscape of Industrial Control Systems (ICSs), examining how adversaries may exploit systematic weaknesses, inherent vulnerabilities, and insecure-by-design issues. We cast a light on the myriad ways that these critical systems, often designed with (functional) safety prioritization in lieu of cybersecurity, can be unwilling conduits for cyber threats. With this foundation laid, we advance our journey in this chapter by discussing a strategic array of cybersecurity countermeasures tailored to safeguard SISs against emerging cyber attacks and to enhance their overall risk profile.

This chapter succinctly presents the core principles of ICS cybersecurity essential for protecting Safety Instrumented Systems (SISs) across their lifecycle. We explore critical security controls and practices – encompassing cyber, physical, managerial, and engineering aspects – to maintain the...