Title: Describe the importance of cybersecurity standards applicable to manufacturing systems.
Course: Cybersecurity in Manufacturing, Advanced (13002-IV) > Section: Applying Cybersecurity Standards and Regulations to Manufacturing Systems

Description should include

- NIST Cybersecurity Framework, U.S. Department of Commerce
- Guide for Applying the Risk Management Framework to Federal Information Systems: A Security Life Cycle Approach (NIST Special Publication [SP] 800-37)
- Security and Privacy Controls for Federal Information Systems and Organizations (NIST SP 800-53)
- Guide to ICS Security (NIST SP 800-82)
- Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations (NIST 800-171)
- International Society of Automation (ISA)/IEC 62443 Cybersecurity Certificate Programs
- Enterprise-control System Integration, International Standards Organization (ISO)/IEC 62264 (Purdue Enterprise Reference Architecture)
- ISA/IEC 62443 Series of Standards.

Teacher Resource: Building Security to Achieve Engineering and Business Requirements, General Electric and Dragos

Process/Skill Questions:

- Why are standards important?
- What is the difference between standards and laws?
- How could you improve product security by considering these standards?
- Why did NIST have to publish rules specific to control systems (e.g., SP 800-82)?
- What is the role of the ISA/IEC 62443 Series of Standards in securing programmable logic controllers (PLCs) and automated systems?