A Distinction with a Difference in FUNCTIONAL SECURITY

摘要

When you're talking about cybersecurity ("functional security") in the process industries, there are only two issues that matter. The first is how much security you need to be really secure. The second isn't all that obvious, but in many ways defines the first - and it's one people aren't thinking about. What's the difference between "compliance" and "security?" To find out, we consulted experts on the ground - security consultants, regulatory experts, vendors, systems integrators and end users. Not surprisingly, their answers covered a lot of territory, but zeroed in on a central theme: Security and compliance are not the same thing. And while it's tempting to think that compliance to existing regulations is "good enough" (and the most cost-effective) security, that's a strategy that can come back to bite you - hard.