THE ISMS AS A SUCCESS FACTOR FOR SECURE OT OPERATIONS ///

At this point, allow me to ask: “Have you already had problems with one or the other protection goal in your company?” 

In any case, the legislator sees the challenges for society. The NIS-G and supplementary ordinances were enacted to ensure security of supply. Essentially, the goal is to protect our (critical) infrastructure from the effects of cyber attacks – e.g., to prevent a blackout. In order to achieve these goals, the legislator stipulates that the companies concerned must establish protective measures for secure IT/IACS/OT operations and prove their effectiveness via regular audits.

To deal with this task in a structured manner, it makes sense to establish an Information Security Management System (ISMS). There are a large number of best practices and standards for this purpose. The most widely used standard in Europe is ISO/IEC 27001, while the IEC 62443 family of standards has been developed for security in IACS/OT environments. While ISO/IEC 27001 essentially addresses the challenges of IT, IEC 62443 specifically targets the requirements in IACS/OT environments. The standards are comprehensively compatible at management system level and thus offer the possibility of forming an end-to-end security management system.

An essential component or the core process of an ISMS is Information Security Risk Management. This enables structured improvement potentials to be identified in the operation of the IACS/OT infrastructure.

With the Risk Management tool CRISAM® an Austrian solution is available which is already used by more than 50% of the ISO 27001 certified companies in Austria. With the latest enhancements of the comprehensive Compliance Knowledge Packs in the area of “critical infrastructure” and “IEC 62443”, you now also have components available that specifically address IACS systems and legal requirements from NISG. Thanks to the comprehensive integrated reporting options, you can prepare the essential information efficiently and in line with the target group.

TO SUMMARIZE:

Companies in these sectors face major challenges in secure IACS/OT operations. However, these can be mastered sustainably with the help of a structured Information Security Management. CRISAM® provides you with a platform that handles the core process of Risk Management professionally and efficiently.