Advanced approach to information security management system model for industrial control system

Area of Science:

• Information Security
• Industrial Control Systems

Background:

• Organizations rely on sensitive information, necessitating robust protection.
• International standards like ISO 27000 series provide information security management systems (ISMS) focusing on confidentiality, integrity, and availability.
• Current ISMS are inadequate for industrial control systems (ICSs) where system safety is paramount.

Purpose of the Study:

• To propose a novel information security management system (ISMS) paradigm specifically designed for industrial control systems (ICSs).
• To address the limitations of existing ISMS in managing sensitive information within ICS environments by incorporating safety as a primary concern.

Main Methods:

• Development of a new ISMS framework tailored for ICS environments.
• Ensuring the new ISMS is mutually exclusive of the ICS to maintain operational integrity and safety.

Main Results:

• The proposed ISMS paradigm is demonstrated to be more suitable for ICSs than existing general-purpose ISMS.
• The new system effectively balances information security principles with the critical safety requirements of industrial control systems.

Conclusions:

• A new ISMS paradigm is required for ICSs that prioritizes safety alongside confidentiality, integrity, and availability.
• The proposed ISMS offers a more appropriate and effective solution for securing sensitive information in industrial control systems.