Recent Posts
- Who's searching on "engineer?"
- Back to ExxonMobil and the skills gap
- Blackout plus five: Any improvements?
- Driving is down, biking is up
- Corn for ethanol sets record in 2008
- ExxonMobil helping plug skills gap
- EPA: Ethanol to stay
- Why drill for oil domestically?
- Reducing energy use, the hard way
- Gasoline stabilizes, now what?
Recent Comments
- Nancy McIntyre on ExxonMobil helping plug skills gap
- EPA: Ethanol to stay on EPA: Ethanol to stay
- MWegenka on Reducing energy use, the hard way
- Kirslis on Making gasoline out of coal
- John Rezabek on 3.6 billion gallons per day
Most Commented On
- Chinese pharma plants go un-inspected? (2)
- I am not a socialist (2)
- EPA: Ethanol to stay (1)
- ExxonMobil helping plug skills gap (1)
- Reducing energy use, the hard way (1)
Archives
- August 2008
- July 2008
- June 2008
- May 2008
- April 2008
- March 2008
- February 2008
- January 2008
- December 2007
- November 2007
- October 2007
- September 2007
- August 2007
- July 2007
- June 2007
- May 2007
- April 2007
- March 2007
Blog
Security is the new safety
March 27, 2007
At the PCSF meeting in Atlanta earlier in March, I heard comments from several people that sounded a similar theme: cyber security is in much the same situation that industrial safety was 10 or 20 years ago. Companies are recognizing that threats can come in through their control systems and understand that defense requires both technical solutions and human behavioral change. Like safety, there is no ultimate solution for cyber security, only levels of defense.
When implementing safety defenses, operators found that machinery has to have appropriate safety devices (technical solution) and workers need to follow safe practices (human behavior) for the program to be successful. Adding standards like SIL levels addisted in designing appropriate remedies for specific applications.
Cyber security is undergoing much the same transformation:
• Technical solutions (firewalls, DMZs, intrusion detection, etc.) are important;
• Human solutions (Don't plug your iPod into the DCS server!) are equally important; and,
• Security standards (ISA 99, DHS Procurement Language) are taking shape.
All these will guide the way. If you want to know the latest on where ISA-99 is, click here to listen to a CE podcast with Bryan Singer, committee chairman.
Posted by Peter Welander on March 27, 2007 | Comments (0)