GRCLibrary.ai

Standard

OT/ICS Security Standard

This standard establishes mandatory security requirements for Operational Technology (OT) environments operated by the organization, including Industrial Control Systems (ICS), Supervisory Control and Data Acquisition (SCADA), Distributed Control Systems (DCS), Programmable Logic Controllers (PLCs), Human-Machine Interfaces (HMIs), Building Management Systems (BMS), and Safety Instrumented Systems (SIS).

Type
Standard
Version
1.0.10
Date
2026-09-20
Owner
Chief Information Security Officer
Approving authority
Governance Library Maintainer
Classification
Public
Confidentiality
Public
Category
Operations: Operational Technology
Review frequency
Annual and upon material change to IEC 62443, NIST SP 800-82, or sector-specific OT regulations
Licence
CC BY-SA 4.0

Read the full text on GitHub (opens in a new tab)

Outline

  • 1. Purpose
  • 2. Scope
  • 3. Governance and accountability
  • 4. Definitions
  • 5. Zone-and-conduit architecture
  • 6. Security-level achievement
  • 7. OT-specific access control
  • 8. Network controls
  • 9. Endpoint and host hardening
  • 10. Monitoring, logging, and detection
  • 11. Vendor and supplier requirements
  • 12. Safety integration
  • 13. Recovery
  • 14. Audit and assurance
  • 15. Framework alignment

Frameworks it maps to

Related documents