International Standards
International Organization for Standardization / International Electrotechnical Commission ISO/IEC 27001 / 27002
North American Electrical Reliability Corporation – Critical Infrastructure Protection NERC-CIP 002 – 009
Instruments, Systems and Automation Society
ANSI/ISA-99.00.01-2007, Security for Industrial Automation and Control Systems Part 1: Terminology, Concepts, and Models
ANSI/ISA-TR99.00.01-2007, Security Technologies for Manufacturing and Control Systems
ANSI/ISA-99.02.01-2009, Security for Industrial Automation and Control Systems: Establishing an Industrial Automation and Control Systems Security Program
ISA-99.03.03 – Security for industrial automation and control systems- System security requirements and security assurance levels
National Institute of Standards and Technology
NIST SP 800-82 Jun. 2011 Guide to Industrial Control Systems (ICS) Security
NIST 800-53 rev. 3 Aug. 2009 Recommended Security Controls for Federal Information Systems and Organizations
American Petroleum Institute
API-1164 – pipeline SCADA security
API-1165 – Recommended Practice for Pipeline SCADA Displays
API-1167 – Alarm Management (in development)
American Gas Association
AGA-12 – SCADA encryption
