Industrial Control System (ICS) Security deals with IT security in the areas of factory automation and process control. The various use cases sometimes relate to critical infrastructures (KRITIS), but there are many other scenarios, as well.

With the following publications, among other things, the BSI supports manufacturers, integrators, and operators in the area of ICS security in order to meet current and future challenges in this field and in IT in general.

General recommendations:

• ICS Security Compendium
• Secure passwords in embedded devices
• OPC UA Security Analysis 1.02 (2015)
• OPC UA Security Analysis 1.04 (2021)
• Recommendations for further education and qualification measures in the ICS environment

Recommendations for ICS operators:

• Top 10 Threats and Countermeasures
• Remote maintenance in industrial environments
• Industrial Control System Security: Inside threat
• Security of IP-based surveillance cameras

Recommendations for ICS manufacturers and integrators:

• ICS Security Compendium for Manufacturers and Integrators
• Vulnerability Handling [English] v1.0
• Requirements for Network- Connected Industrial Components [English] v1.1
• Security Requirements
• Cyber Security Requirements for Network-Connected Medical Devices

Tools:

LARS ICS (tool and manual)

RAPSN SETS