Glossary · OT cybersecurity
Safety-security convergence
Also known as: Safety and security co-engineering, Safety-security integration
German: Safety-Security-Konvergenz
In industrial automation, safety-security convergence is the coordinated engineering and management of functional safety and cybersecurity, recognizing that cyberattacks can defeat safety functions and that security measures can affect safety, so that both are analyzed, designed and maintained together without weakening either.
- OT security
- Functional safety
In one sentence
Safety-security convergence coordinates functional safety and cybersecurity so that attacks cannot defeat safety functions and security never weakens safety.
Example
The team links its HAZOP and security risk assessment: every scenario where a manipulated setpoint could cause overpressure gets both a safety instrumented function and a protected conduit.
Explained in context
Context cards connect this term with others to answer one question. Also in British English and German.
- Machinery Regulation and CRA: coupled through standards, not cross-referencesWhy can the Machinery Regulation and the Cyber Resilience Act not simply refer to each other?UKDeutsch
- EN 50742: safety-related security levels and IEC 62443 working togetherIs EN 50742 a sign that legislators misunderstand technicalities, and do its SRSLs contradict IEC 62443?UKDeutsch
How it applies
- Engineering: IEC 61508 requires a security threat analysis where malevolent action is foreseeable, and IEC 61511 requires a security risk assessment for safety instrumented systems. IEC TR 63069 gives a framework for applying IEC 61508 and IEC 62443 together, and IEC TS 63074 addresses security aspects of safety-related control systems of machinery.
- Design: Safety functions should not depend on components that can be easily compromised. Security measures, such as firewalls or patches, must not delay or block safety communication.
- Maintenance: Security updates to safety-related devices can affect the validated configuration. Change control must judge both safety and security impact.
- Documentation: Safety manuals and security manuals must be consistent. Cross-reference security requirements that protect safety functions, and make sure a security instruction never conflicts with a safety instruction.
Safety-security convergence vs. safety-security interface
The Safety-security interface is the point where security conditions can affect safety. Convergence is the organizational and engineering approach of handling both disciplines together across the lifecycle.