ANSI/ISA-62443-2-1 (99.02.01)-2009 (formerly designated as ANsi/ISA-99.02.0i-2009) Security for Industrial Automation and Control Systems Part 2-1: Establishing an Industrial Automation and Control Systems Security Program Approved 13 January 2009 ANSI/ISA-62443-2-1 (99.02.01)-2009 -3- Preface This preface, as well as all footnotes and annexes, is included for information purposes and is not part of ANSI/ISA-62443-2-1 (99.02.01)-2009 This document has been prepared as part of the service of IsA, the Instrumentation, Systems and Automation Society, toward a goal of uniformity in the field of instrumentation. To be of real value, this document should not be static but should be subject to periodic review. Toward this end, the Society welcomes all comments and criticisms and asks that they be addressed to the Secretary, Standards and Practices Board; ISA; 67 Alexander Drive; P. O. Box 12277; Research Triangle Park,NC 27709; Telephone (919) 549-8411; Fax (919)549-8288; E-mail: [email protected]. The ISA Standards and Practices Department is aware of the growing need for attention to the metric system of units in general and the International System of Units (Sl) in particular, in the preparation of instrumentation standards. The Department is further aware of the benefits to USA users of iSA standards of incorporating suitable references to the Si (and the metric system) in their business and professional dealings with other countries. Toward this end, this Department will endeavour to introduce Sl-acceptable metric units in all new and revised standards, recommendedpractices andtechnicalreports to the greatest extentpossible.StandardforUse of the International System of Units (Sl): The Modern Metric System, published by the American Society for Testing and Materials as s IEEE/ASTM SI 10-97, and future revisions, will be the reference guide for definitions, symbols, abbreviations, and conversion factors. Itisthe policyof iSAto encourageand welcometheparticipation of all concerned individuals and interests in the development of iSA standards, recommended practices and technical reports.Participation intheiSAstandards-makingprocessbyanindividual in nowayconstitutes endorsement by the employer of that individual, of isA or of any of the standards, recommended practices and technical reports that IsA develops. CAUTION - ISA does not take any position with respect to the existence or validity of any patent rights asserted in connection with this document, and isA disclaims liability for the infringement of any patent resulting from the use of this document. Users are advised that determination of the validity of any patent rights, and the risk of infringement of such rights, is entirely their own responsibility. Pursuant to IsA's Patent Policy, one or more patent holders or patent applicants may have disclosed patents that could be infringed by use of this document and executed a Letter of Assurance committing to the granting of a license on a worldwide, non-discriminatory basis, with a fair and reasonable royalty rate and fair and reasonable terms and conditions. For more information on such disclosures and Letters of Assurance, contact ISA or visit www.isa.org/StandardsPatents. Other patents or patent claims may exist for which a disclosure or Letter of Assurance has which a license may be required, for conducting inquiries into the legal validity or scope of patents, or determining whether any licensing terms or conditions provided in connection with submission of a Letter of Assurance, if any, or in any licensing agreementsarereasonableornon-discriminatory. IsA requests that anyone reviewing this Document who is aware of any patents that may impact implementation of the Document notify the ISA Standards and Practices Department of the patent and its owner. Additionally, the use of this standard may involve hazardous materials, operations or equipment. The standard cannot anticipate all possible applications or address all Copyright