PIP PCCCS001

This Practice describes guidelines and background information for the selection, design, and operation of cybersecurity countermeasures in Industrial Control Systems (ICS). Also included is guidance for connection to enterprise systems, hardware selection criteria, software selection criteria, ancillary equipment requirements, and testing of ICS cybersecurity. General guidance related to cybersecurity for industrial control networks is addressed in this Practice in addition to covering allowable communication with external systems and securing communications between ICS and external networks. Building controls systems, enterprise systems, and other business-related operational technology systems are considered out of scope. This Practice also does not cover ICS cybersecurity risk assessment.