Safety and Security: Can they live together?

Size: px

Start display at page:

Download "Safety and Security: Can they live together?"

Gavin Campbell
6 years ago
Views:

1 Safety and Security: Can they live together? Marcel Castro (Ph.D.) Technical Safety & Reliability Engineer IEC Young Professional 2014

2 Agenda Background Safety Standards Security Standards Aligning Safety & Security: current activities and main findings Future Opportunities 1

3 Disclaimer This presentation reflects the views of the author and should not be construed to represent FMC Technologies views. 2

4 Background Definition Safety: freedom from risk which is not tolerable Security is protection or defense against attack, interference, or espionage *. In the industrial control system scope: Both with target to protect people, environment and asset RISK = Severity of HARM & Probability of Occurrence of that Harm Source: ISO/IEC Guide 51 Both Security & Safety work are standard driven Any model differences? A large and quite confusing area with many standards * Does not cover physical security 3

5 Industrial Control System (ICS) Operation Human Machine Interface (HMI) Remote Diagnostic and Maintenance Set points, Control algorithms, Parameter constraints, Process data Manipulated Variable Controller Controlled Variables Actuators Sensors Process inputs Controlled Process Process outputs 4

6 Functional Safety Standards IEC 61511: Process Industry IEC 62061: Machinery IEC 61513: Nuclear IEC 61508: Generic standard on functional safety ISO 26262: Automotive IEC / IEC 62425/ IEC 62269: Railway 5

7 Security Standards Source: Hitachi Review Vol. 63 (2014). 6

8 IEC-62443: Four Categories 7

9 Agenda Background Safety Standards Security Standards Aligning Safety & Security: current activities and main findings Future Opportunities 8

10 Aligning Safety & Security: Relationship The relationship comes from the similarity of possible consequences. 9

11 Safety and Security Interactions Conditional dependency: Fulfillment of safety requirements conditions security or viceversa. Mutual reinforcement: Fulfillment of safety requirements or safety measures contributes to security, or vice-versa, thereby enabling resource optimization and cost reduction. Antagonism: When considered jointly, safety and security requirements or measures lead to conflicting situations. Independency: No interaction. Source: by Pietre Cambacedes. 10

12 Aligning Safety & Security: Some Activities ISA99 WG7 & TG1 ISA84 -> ISA IEC TC65 AHG1 LOGIIC (Linking the Oil and Gas Industry to Improve Cybersecurity) 11

13 Main Findings: Need to address cybersecurity throughout the entire lifecycle [ISA ] Greater integration may introduce greater risk [LOGIIC] Default configurations are not secure [LOGIIC] Defense in depth is needed [LOGIIC] Clear guidance is needed [LOGIIC] Improvement of security does not require an improved SIL [ISA99 WG7 & TG1] But, failure mode analysis is the common ground 12

14 Agenda Background Safety Standards Security Standards Aligning Safety & Security: current activities and main findings Future Opportunities 13

15 IEC 61511: 2 nd Edition IEC Functional safety for process industry sector 2 nd Edition: planned Q New requirements containing security risk assessment (8.2.4). Need for a security risk assessment for the SIS and associated devices: Description of identified treats that could exploit vulnerabilities and result in security events Potential consequences and requirements for risk reduction This shall be considered for the different lifecycle phases (design, implementation, commissioning, operation and maintenance). Detailed on SIS security is found in ISA TR , ISO/IEC and IEC

16 Cybersecurity Conformity Assessment Check to see if product adheres to standard Driver - > Security, privacy, risk reduction Three level CA necessary industry automation sector Product level known risk protection Systems integration level design/process certification Asset owner s level maintenance process + Personal competency certification Supply chain 15

17 IEC Conformity Assessment: Landscape IECEE IECEx IECQ CYBER Type test Unit cert. Services People Process Supply chain Project Life-cycle 16

18 Thank You Marcel Castro (Ph.D.) TS&R Engineer, FMC Technologies 17

PRIMATECH WHITE PAPER CHANGES IN THE SECOND EDITION OF IEC 61511: A PROCESS SAFETY PERSPECTIVE

PRIMATECH WHITE PAPER CHANGES IN THE SECOND EDITION OF IEC 61511: A PROCESS SAFETY PERSPECTIVE Summary From the perspective of process safety, the most notable change is the addition of requirements for