Industrialcyber.Co Integrating Safety and Cybersecurity in Industrial Control Systems
Article Content
- •Integration of functional safety and OT cybersecurity is essential for industrial control systems.
- •The TRITON/TRISIS incident highlights the dual risks of safety and cybersecurity.
- •Existing ISA/IEC standards mandate security measures for Safety Instrumented Systems.
A recent discussion by Rafael Barreto Jijón emphasizes the need for industrial asset owners to integrate functional safety and operational technology (OT) cybersecurity into a unified lifecycle. He cites the 2017 TRITON/TRISIS malware incident as evidence that attacks on safety systems can simultaneously pose cybersecurity and safety risks. The ISA/IEC standards, particularly ISA/IEC 61511 and ISA/IEC 62443, already mandate security risk assessments and resilience measures for Safety Instrumented Systems (SIS). Barreto Jijón advocates for joint risk assessments, coordinated maintenance, and integrated incident response to address the interconnected risks. He stresses that existing standards require asset owners to protect safety systems from interference by non-safety networks. The call to action is to stop running parallel programs and operationalize a single lifecycle for safety and cybersecurity.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track Trisis in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What are the key ISA/IEC standards mentioned?
Why is integration of safety and cybersecurity important?
What steps should asset owners take?
Continue Reading
Critical Zero-Day Exploited in BeyondTrust Remote Support by China-linked Group A critical vulnerability in BeyondTrust Remote Support, tracked as CVE-2026-102764 with a CVSS score of 9.3, has been exploited by the China-linked espionage group Armory Castle since August 29, 2026. This flaw allows unauthenticated remote attackers to perform file operations, gaining root control and access to… 
Silent Lynx Targets CIS Governments via WinRAR Exploit The threat actor Silent Lynx has launched a series of attacks against government organizations in the Commonwealth of Independent States (CIS) from June 2025 to August 2026. These attacks exploit a vulnerability in WinRAR (CVE-2025-8088) to deploy reverse shells, including FoalShell and PickleShell, facilitating…