SP99, the cyber security group in ISA, is meeting at ISA Expo in Houston. Here is a quick update.

Technical Report 1 - Security Technologies for Manufacturing and Control Systems

SP99 intends on keeping this document current and the first update is scheduled to go out for vote in Q1 2007. TR1 is a highly useful document, especially the sections that describe how the various security technologies can be used in control systems.

SP 99, Part 1 - Terminology, Concepts & Models

Part 1 went out for its first ballot and passed, much to the surprise of the chairs. Over 200 comments were received, which is fantastic. The working group felt that the comments should be integrated into Part 1 and that this would change the document enough to warrant a re-ballot. It should be out for vote again this year.

SP 99, Part 2 - Establishing an Industrial Automation and Control System Security Program

Part 2 went out for ballot and did not receive a quorum. However over 200 comments were received. Comments will be addressed and it will be out for re-ballot in Q1/2007

SP 99, Part 4 - Security Requirements for Industrial Automation and Control Systems

Work on Part 4 is kicking off at this meeting. I may have more on this later today. Brian Singer referred to Part 4 as a “SIL level for security”.