Contributor: International Society of Automation

The ISA Global Cybersecurity Alliance begins the new year with several priority projects underway and an expanded group of companies and organizations as members.

ISAGCA is organized into four general focus areas for cybersecurity including: Awareness & Outreach; Compliance & Prevention; Education & Training; and Advocacy & Adoption. These focus areas or working groups are comprised of subject matter experts from member companies, ISA staff, and outside experts who are collectively working on the following projects in 2020:

• An easy-to-follow, condensed guide to implementing the ISA/IEC 62443 series of standards
• A consolidated matrix that cross-references all cybersecurity-related standards to ISA/IEC 62443 principles
• A roadmap for expanded cooperation with worldwide governments that are currently referencing the standards in their regulatory requirements or recommended practices
• A multi-dimensional reference guide mapping system lifecycle phases and stakeholder roles to specific automation cybersecurity knowledge, skills, and abilities needed to manage each phase
• Publishing industry vertical overlays to the ISA/IEC 62443 standards for building automation, medical devices, and other sectors
• A database of speakers with expertise and experience in automation cybersecurity and associated commitments for speaking opportunities at industry events

In addition to identifying and starting work on these priority projects, the ISA Global Cybersecurity Alliance has more than tripled its founding members with the addition of 23 new companies and organizations to its membership. At the end of July, ISAGCA announced Schneider Electric, Rockwell Automation, Honeywell, Johnson Controls, Claroty, and Nozomi Networks as its initial founding members. Subsequently, as of the end of 2019, the following additional companies joined the ISAGCA as founding members:

• aeSolutions
• Bayshore Networks
• Beijing Winicssec Technologies Co. Ltd.
• Digital Immunity
• Dragos
• exida
• ISA Security Compliance Institute
• ISA99 Committee
• Idaho National Laboratory
• LOGIIC (Linking the Oil and Gas Industry to Improve Cybersecurity)
• Mission Secure, Inc.
• Mocana Corporation
• Munio Security
• PAS Global
• Radiflow
• Senhasegura (supporting member)
• Tenable
• TiSafe
• Tripwire
• WisePlant
• Wallix Group
• Xage Security

End users, asset owners, government agencies and other cybersecurity-focused organizations are welcomed to join the ISA Global Cybersecurity Alliance. The current membership roster includes:

• Idaho National Laboratory, the United States’ leading center for nuclear energy research and development;
• the ISA Security Compliance Institute, which has been certifying automation products under the ISASecure® brand since 2010 via a global network of accredited certification bodies;
• LOGIIC, an ongoing collaboration of oil and natural gas companies and the U.S. Department of Homeland Security that undertakes collaborative research and development projects to investigate and improve upon the level of cybersecurity in critical systems of interest to the oil and natural gas sector;
• and the ISA99 Committee, responsible for the expansion and advocacy of the ISA/IEC 62443 series of standards.  

“Unifying and intensifying the work of experts around the world, regardless of affiliation, is a key part of ISAGCA’s mission. We believe that automation providers, cybersecurity vendors, asset owners, government agencies, research groups, and others involved in cybersecurity efforts are stronger together, collaborating to deliver solutions that meet the needs of industry today and tomorrow,” said ISA Executive Director Mary Ramsey. “We are proud to bring together a diverse group of thought leaders to advance the state of cybersecurity.”

As members of the ISA Global Cybersecurity Alliance, industry groups such as the ISA Security Compliance Institute, LOGIIC, and the ISA99 Committee will bring the interests of its members to the work of the ISAGCA.

Notable members of the ISA Security Compliance Institute include Chevron, ExxonMobil, Honeywell, Schneider Electric, Yokogawa, exida, Control System Security Center, YPF, Japan Information Technology Promotion Agency, Royal Dutch Shell plc, TUV Rheinland, DNV GL, and TUV SUD. Current members of LOGIIC include BP, Chevron, ExxonMobil, Shell, Total, ConocoPhillips, and other large oil and gas companies that operate significant global energy infrastructure.

To learn more about the ISA Global Cybersecurity Alliance, visit www.isa.org/isagca. For media inquiries or requests for interviews, contact ISA Marketing & Communications Director Jennifer Halsey at jhalsey@isa.org.

About ISA

The International Society of Automation (www.isa.org) is a nonprofit professional association that sets the standard for those who apply engineering and technology to improve the management, safety, and cybersecurity of modern automation and control systems used across industry and critical infrastructure. Founded in 1945, ISA develops widely used global standards; certifies industry professionals; provides education and training; publishes books and technical articles; hosts conferences and exhibits; and provides networking and career development programs for its 40,000 members and 400,000 customers around the world.

ISA owns Automation.com, a leading online publisher of automation-related content, and is the founding sponsor of The Automation Federation (www.automationfederation.org), an association of non-profit organizations serving as “The Voice of Automation.” Through a wholly owned subsidiary, ISA bridges the gap between standards and their implementation with the ISA Security Compliance Institute (www.isasecure.org) and the ISA Wireless Compliance Institute (www.isa100wci.org).