Overview of Information Security Standards in the Field of Special Protected Industry 4.0 Areas & Industrial Security

摘要

Nowadays, not many areas exist where no IT device is available, moreover, these tools are mostly interconnected via internet. In many cases, private life and work are not separated, but they are integrated into each other. Industry 4.0 represents a new step in the value chain, pushing production also towards the utilization of cyber-physical systems. It is necessary that the control of these IT eco-systems is established. The regulation is very important in case of protected / controlled areas both in terms of technology and human behavior. Regulation forms are trying to keep up with this challenge. It is clear that there are existing uniform methodologies (e.g. COBIT, ITIL) and globally established procedures as well (e.g. ISO27000 and NIST800). In the course of the research of controlled areas, it is necessary to investigate the currently available standards from the aspect of information security. The study demonstrates how those organizations and regulations are shaped which define today’s IT security recommendations and norms. Moreover, it describes those standards on a personal approach, the parallel application of which can accomplish the complex security of controlled areas.