An Invensys white paper on process control security architecture and practices is now available on the Internet.

The paper has some nice diagrams on segmenting networks into zones and a helpful best practice checklist (page 11). The paper puts a little more emphasis on intrusion prevention systems than I’m comfortable with, but that is a future article or long blog entry. Overall, it is good to see vendors beginning to make some of this helpful information public.