Advanced Approach to Information Security Management System Model for Industrial Control System
Open accessAbstract
Organizations make use of important information in day-to-day business. Protecting sensitive information is imperative and must be managed. Companies in many parts of the world protect sensitive information using the international standard known as the information security management system (ISMS). ISO 27000 series is the international standard ISMS used to protect confidentiality, integrity, and availability of sensitive information. While an ISMS based on ISO 27000 series has no particular flaws for general information systems, it is unfit to manage sensitive information for industrial control systems (ICSs) because the first priority of industrial control is safety of the system. Therefore, a new information security management system based on confidentiality, integrity, and availability as well as safety is required for ICSs. This new ISMS must be mutually exclusive of an ICS. This paper provides a new paradigm of ISMS for ICSs, which will be shown to be more suitable than the existing ISMS.
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
The security objectives in ISO 27001 and NIST 800-53 were inadequate and did not reflect the uniqueness of the nature of ICS/SCADA systems, but the safety requirements of IEC 61511 matched the common security controls.
“The security objectives in ISO 27001 and NIST 800-53 were inadequate and did not reflect the uniqueness of the nature of ICS/SCADA systems, but the safety requirements of IEC 61511 matched the common security controls.”
From Industrial IoT, Cyber Threats, and Standards Landscape: Evaluation and Roadmap (2021) · cites this paper as [104]
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Cites
An economic modelling approach to information security risk management
Bojanc, R., & Jerman-Blažič, B. (2008) · International Journal of Information Management · doi:10.1016/j.ijinfomgt.2008.02.002 · Cited by 194 · see citing works
Information security management standards: Compliance, governance and risk management
Humphreys, E. (2008) · Information Security Technical Report · doi:10.1016/j.istr.2008.10.010 · Cited by 149 · see citing works
A study on information security management system evaluation—assets, threat and vulnerability
Farn, K., Lin, S.-K., & Fung, A. R.-W. (2004) · Computer Standards & Interfaces · doi:10.1016/j.csi.2004.03.012 · Cited by 36 · see citing works
Industrial Control System (ICS) Cyber Security for Water and Wastewater Systems
Weiss, J. (2013) · Springer eBooks · doi:10.1007/978-3-319-01092-2_3 · Cited by 31 · see citing works
Cyberphysical Security for Industrial Control Systems Based on Wireless Sensor Networks
Lu, T., Guo, X., Li, Y., Peng, Y., Zhang, X., Xie, F., & Gao, Y. (2014) · International Journal of Distributed Sensor Networks · doi:10.1155/2014/438350 · Cited by 31 · see citing works
Evaluation of security solutions in the SCADA environment
Larkin, R. D., Lopez, J., Butts, J. W., & Grimaila, M. R. (2014) · ACM SIGMIS Database the DATABASE for Advances in Information Systems · doi:10.1145/2591056.2591060 · Cited by 29 · see citing works
Fovino, I. N. (2013) · Springer eBooks · doi:10.1007/978-1-4614-7915-4_20 · Cited by 15 · see citing works
Global and initiative safety mechanism in industrial control system
Xu, X., Kang, W., Fang, Z., Sun, B., Wang, Y., & Zhu, T. (2014) · International Journal of Computational Science and Engineering · doi:10.1504/ijcse.2014.058698 · Cited by 5 · see citing works
A Nomological Network Analysis of Research on Information Security Management Systems
Parra, F., & Hall, L. L. (2014) · Hawaii International Conference on System Sciences (HICSS) · doi:10.1109/hicss.2014.536 · Cited by 4 · see citing works
Goal-Based Establishment of an Information Security Management System Compliant to ISO 27001
Beckers, K. (2014) · Lecture notes in computer science · doi:10.1007/978-3-319-04298-5_10 · Cited by 4 · see citing works
Information Security Policy Development
Al-Mayahi, I., & Mansoor, S. P. (2014) · Journal of Advanced Management Science · doi:10.12720/joams.2.2.135-139 · Cited by 4 · see citing works
Security Controls Based on K-ISMS in Cloud Computing Service
Mun, J., Jung, Y., Kim, J., et al. (2013) · Lecture notes in electrical engineering · doi:10.1007/978-3-642-41674-3_56 · Cited by 2 · see citing works
Flagged first, then by citations
Cited by
Sorted by citations
A review of cyber security risk assessment methods for SCADA systems
Cherdantseva, Y., Burnap, P., Blyth, A., Eden, P., Jones, K., Soulsby, H., & Stoddart, K. (2016) · Computers & Security · doi:10.1016/j.cose.2015.09.009 · Cited by 606 · see citing works
Industrial IoT, Cyber Threats, and Standards Landscape: Evaluation and Roadmap
Dhirani, L. L., Armstrong, E., & Newe, T. (2021) · Sensors · doi:10.3390/s21113901 · Cited by 172 · see citing works
“IEC 62443 Security Capabilities for ICS components [46] IEC 61784-1:2019 Industrial Communication Networks (Communication Profile) [104] ISO 27001 Information Security Management Systems—Requirements (Annex A.”
BackgroundResult
- Authors
- Park, S., & Lee, K.
- Affiliations
- Korea University (KR)
- Corresponding author
- Lee, Kyungho
- Venue
- The Scientific World Journal
- Publisher
- Wiley
- Published
- 2014
- Volume
- 2014
- Pages
- 1-13
- ISSN
- 1537-744X (ISSN-L)
- 2356-6140
- PMC
- PMC4129153
- OpenAlex
- W2050821843
- Cited by
- 19
- References
- 12
- Citations by year
- 2023: 2 · 2022: 2 · 2021: 2 · 2020: 2 · 2019: 2 · 2018: 3 · 2017: 1 · 2016: 2 · 2015: 3
- FWCI
- 5.53
- Type
- journal article
- Language
- en
- Open access
- gold
- doi.org
- Locations
- The Scientific World JOURNAL (publishedVersion, cc-by)
- PubMed Central (publishedVersion, cc-by)
- PubMed (publishedVersion)
- DOAJ (DOAJ: Directory of Open Access Journals) (submittedVersion, cc-by-sa)
- Funders
- Korea University
- Topics
- Physical Sciences › Computer Science › Information Systems › Information and Cyber Security
- Social Sciences › Business, Management and Accounting › Strategy and Management › Quality and Management Systems
- Physical Sciences › Engineering › Control and Systems Engineering › Smart Grid Security and Resilience
- Keywords
- information security management system, industrial control systems, ISO/IEC 27000, confidentiality, integrity and availability, system safety, security model, industrial cybersecurity
- MeSH terms
- Information Systems, Computer Security
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
