Standardizing industrial IT security - a first look at the IEC approach

Information system security for industrial plants is a topic of increasing importance. Effective and cost-efficient security solutions require some kind of industry consensus or standardization. This paper examines the interests of the various stakeholders in the industrial security field (e.g. society, plant owners, service providers, automation vendors, and consultants) and evaluates some of the more visible industrial security initiatives (ISA, NERC, IEC) with regard to stakeholder benefits and requirements. The paper then proceeds to give some details on the approach and current draft of the industrial control system security working group within IEC TC65