# ISA99 - Industrial automation cyber security system

**URL:** <https://forumautomation.com/t/isa99-industrial-automation-cyber-security-system/4225>\
**Category:** Industrial Networking\
**Created:** [July 25, 2018, 3:02pm UTC](https://forumautomation.com/t/isa99-industrial-automation-cyber-security-system/4225 "2018-07-25T15:02:06Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![sivaranjith](https://forumautomation.com/letter_avatar_proxy/v4/letter/s/ba9def/32.png) [@sivaranjith](https://forumautomation.com/u/sivaranjith)\
**Post date:** [July 25, 2018, 3:02pm UTC](https://forumautomation.com/t/isa99-industrial-automation-cyber-security-system/4225/1 "2018-07-25T15:02:06Z")

</div>

ISA99 are cybersecurity standards developed by ISA (International Society of Automation) committee. The committee contains 500+ members representing different companies across the globe. The committee or the standards stand for protect the cyber environment of a user or organization.

The committee addresses:

- Endangerment of public or employee safety
- Loss of public confidence
- Violation of regulatory requirements
- Loss of proprietary or confidential information
- Economic loss
- Impact on national security

The ISA99 consist of 4 main IEC 62443 series of standards:

- General

- Policies & Procedures

- System

- Component

 ![isa99](https://cdn.forumautomation.com/original/2X/b/b36030c1e3a353011bbdb3f5f9e4d0a17aa44f9b.jpg)

#### General:

This IEC 62443 series general is about Terminology, concepts and models, Foundational Material and Consistent Terminology. And Security Compliance Metrics.

#### Policies and Procedures:

- 2-2 and 2-1 functions on Establishing & Operating a Security Program: Specifically concerned on Asset Owner, Non-Technical, IACS-Specific Requirements & Guidance.

- 2-3 is for Patch management: Applying Well- Established Practices to IACS XML Schema for Patch Descriptions.

#### System:

- 3-1 for Security Technologies: Guidance on applying, Existing Tools, Technology and Controls to IACS.

- 3-2 for Zones & Conduits: Defining Logical Architecture Breakdown, Determine Target SALs

- 3-3 for System-Level Security Requirements: Technical Controls, IACS-Specific Requirements & Guidance, Specifies Capability SALs.

#### Component:

- 4-1 for Product Development Lifecycle: Requirements for Each development Phase, Building security in from the ground up.

- 4-2 for Component-Level Security Requirements: Technical controls, Expand system - Level reqs. for individual components, IACS-specific requirements & guidance, Specifies capability SALs.