Cybersecurity standards
Technical cybersecurity standards, in two parts. The first covers industrial automation and control systems (OT, ICS/SCADA) and cyber-physical systems, by sector: from cross-sector standards such as the IEC 62443 series to those for energy, rail, automotive, maritime, health and nuclear, including those still under development. The second covers general standards: information security management systems, business continuity, product certification, IoT, cloud, payments, artificial intelligence and vulnerability management.
Standards are protected by copyright and almost always sold: here you find metadata, an original summary and a link to the official catalogue page where they can be consulted or bought. The text is not reproduced.
OT/CPS documents in the database (23) · Open data (JSON)
OT and cyber-physical systems standards
Energy (6 standards)
API Std 1164 Pipeline Control Systems Cybersecurity
IEC 62351 Power systems management and associated information exchange – Data and communications security
IEEE 1686-2022 IEEE Standard for Intelligent Electronic Devices Cybersecurity Capabilities
IEEE C37.240-2014 IEEE Standard Cybersecurity Requirements for Substation Automation, Protection, and Control Systems
ISO/IEC 27019:2024 Information security, cybersecurity and privacy protection – Information security controls for the energy utility industry
NERC CIP Critical Infrastructure Protection (CIP) Reliability Standards
Manufacturing and process industry (2 standards)
IEC 61511-1:2016 Functional safety – Safety instrumented systems for the process industry sector – Part 1: Framework, definitions, system, hardware and application programming requirements
IEC TS 63074:2023 Safety of machinery – Security aspects related to functional safety of safety-related control systems
Water and wastewater (1 standards)
Rail transport (2 standards)
Automotive and connected vehicles (4 standards)
Maritime transport (2 standards)
Health (2 standards)
Nuclear (4 standards)
IAEA NSS 17-T (Rev. 1) Computer Security Techniques for Nuclear Facilities
IEC 62645:2019 Nuclear power plants – Instrumentation, control and electrical power systems – Cybersecurity requirements
IEC 62859:2016 Nuclear power plants – Instrumentation and control systems – Requirements for coordinating safety and cybersecurity
IEC 63096:2020 Nuclear power plants – Instrumentation, control and electrical power systems – Security controls
General cybersecurity standards
Artificial intelligence (3 standards)
ETSI EN 304 223 Securing Artificial Intelligence (SAI); Baseline Cyber Security Requirements for AI Models and Systems
ISO/IEC 27090:2026 Cybersecurity – Artificial intelligence (AI) – Addressing security threats and compromises to AI systems
ISO/IEC 42001:2023 Information technology – Artificial intelligence – Management system