Safety and security

In a physical process, a security control can create a safety hazard, and that changes which controls are acceptable.

An authentication prompt in front of an emergency stop is a safety problem. Network filtering that delays a control signal can be a safety problem. Security measures here have to be assessed against the process hazard analysis, not just against the threat, and safety wins when they conflict.

Checked against the primary source.

More on OT, ICS & cyber-physical