This discussion is locked.
You cannot post a reply to this discussion. If you have a question start a new discussion

IET Safety and Security Code of Practice - Input needed

Briefing Document - we want your feedback

The IET Safety TPN has been working closely with the IET Standards Team on a scope for a new Safety and Security Code of Practice.   The briefiing document is attached so have a look and let us know what you think of the idea, does it cover what you would expect, would this be useful and any other comments that we can feed back to the committee.

Next Stage

Get involved and give us your thoughts on this page.


The next stage is to hold a scoping meeting at with around 30 interested stakeholders.  If you are interested in participating in a future scoping workshop on the area, please contact Andrew Cooney (Portfolio Development Manager, IET Standards).

IET Standards

For those of you who may not know a lot about the IET Standards, IET Standards publishes authoritative standards, codes of practice and guidance materials for professional engineers and other key stakeholders, using its expertise to achieve consensus on best practice in emerging and established technology fields. Have a look to see what we already have and what is coming soon.
Parents
  • Hi Lynsay


    I think that a code of practice covering the full range of systems that are highly connected to those that are relatively isolated from the internet is very ambitious. An alternative starting point would be a technical paper which discussed the issues, and provided guidance to help the engineer balance competing requirements derived from safety and security standards. Depending on user feedback this could grow to become a set of guidelines.

    Such a paper should start with the domain specific definitions of risk which is not straightforward as the safety domain considers  people, property and the environment while the security domain focuses on confidentiality, integrity and availability.


    Regards

    David Cronheim

Reply
  • Hi Lynsay


    I think that a code of practice covering the full range of systems that are highly connected to those that are relatively isolated from the internet is very ambitious. An alternative starting point would be a technical paper which discussed the issues, and provided guidance to help the engineer balance competing requirements derived from safety and security standards. Depending on user feedback this could grow to become a set of guidelines.

    Such a paper should start with the domain specific definitions of risk which is not straightforward as the safety domain considers  people, property and the environment while the security domain focuses on confidentiality, integrity and availability.


    Regards

    David Cronheim

Children
No Data