ISA99 Working Group 5 Meeting Notes

Transcription

1 Date: February 4, 2016 Time: 11:00 ET US Lead: E. Cosman Notes: E. Cosman Distribution: ISA99 committee and stakeholders ISA99 Working Group 5 Meeting Notes ISA 67 Alexander Drive PO Box Research Triangle Park, NC Telephone 919/ Fax 919/ Name Affiliation Group Present Ayman Al-Issa WG1 Eliana Brazda ISA Staff P Eric Cosman OIT Concepts LLC Chair P William Cotter 3M PI&CS WG6 John Cusimano AE Solutions WG7 Jim Gilsinn Kenexis WG2 P Andrew Ginter Waterfall WG1 Tom Good WG2 Vic Hammond Argonne National Laboratory WG12 P Dennis Holstein Opus Consulting Group WG12 P Lee Neitzel Consultant TC65 WG10 Johan Nye ExxonMobil WG4 Tom Phinney Consultant TC65 WG10 Jeff Potter Emerson Process Management WG3/4/7 P Charley Robinson ISA Staff P Ragnar Schierholz ABB WG3 Kevin Staggs Honeywell Corporate Research WG4 P Herman Storey Consultant WG9 Donovan Tindill Honeywell WG6 Joe Weiss Applied Control Solutions WG11 P Linda Wolffe P Present; p Partial attendance; D Declined or Unavailable P Page 1 of 6

2 1. Old Business 1.1 Action Items The following are pending from previous meetings: ID Action Item Responsibility Status Comments 43 Determine plans for a ballot to adopt IEC Locate earlier notes about the proposed liaison between ISA99 and IEEE and shared with Dennis H. 45 Draft a note to work and task group leaders about the intent of New and Continuing Business Eric, Jim Open Have to include the associated workbook Eric C. Eric C. In addition to regular work group updates the following specific topics will be addressed in this meeting. Level 1 activity with Marathon 3. Working Group Updates 3.1 WG1: Technologies (From January 21, 2016): There was no update from this work group. The group has been inactive since November. 3.2 WG2: Security Program (From January 21, 2016): WG2 did not meet the last couple weeks due to Jim s travel schedule. They are continuing to revise the document and prepare the next working draft. This group is working on edits to There was a question from Tom G. about consideration of cloud computing models, and how to share data with service providers. Dennis is working with CIGRE and OMG in this area. 3.3 WG3: Concepts and Models (From January 21, 2016): This group met on January 18th. Maturity models was the primary topic for this meeting. The basic model was accepted by those present. Security levels was the focus topic of the most recent meeting (February 1 st ). The meeting notes are on the portal. Users of have reported difficulty in applying the security level concept as it was defined in that standard. Information from ISA84 WG9 and the IEC working group is also being considered WG3TG1 (Terminology) Open Open (From January 21, 2016): There was no recent update from this task group. This task group will be meeting later today. Work is underway to finalize the master glossary. Bruce B. is working very well as a task group lead. Page 2 of 6

3 3.3.2 WG3TG3 (Protection Levels) (From January 21, 2016): The discussion of the purpose of the group is complete. The next meeting will start a discussion of the protection level concept. This group is starting to discuss the protection level concept (i.e., security levels at various levels of maturity). 3.4 WG4: Technical Requirements (From January 21, 2016): Task group 6 has completed a CDV of It has been reviewed by Johan and Kevin and submitted to the committee chairs for ballot. Preparations are underway for the ballot. All of the comments on the previous DC have been addressed (ISA and IEC). Jim will complete a final review of the current draft before the ballot is issued. 3.5 WG6: Patch Management (From January 21, 2016): There has been no recent meeting of this group. There has been no recent meeting of this group. The focus remains on the possible elevation to a standard. 3.6 WG7: Safety & Security (From January 21, 2016): The new IEC work group on security and safety will hold their first meeting in Helsinki in June. Joe mentioned that we also have to keep the nuclear sector in mind. Everyone is encouraged to review the draft of ISA-TR and pass comments to Hal Thomas. 3.7 WG8: Communication and Outreach (From January 21, 2016): This group is not active. This group is not active. 3.8 WG9: Wireless and Security JWG (From January 21, 2016): There was no update from this work group. There was no update from this work group. 3.9 WG11: ISA99-ISA67 JWG on cyber security for nuclear plants (From January 21, 2016): The Nuclear Threat Initiative (NTI) has issued a report about nuclear plants and cybersecurity. There was no update from this work group WG12: Metrics (From January 21, 2016): This group is still waiting for results from the IEC review of their draft for comment. They have the ISA comments. Members of the group are waiting for update from IEC on this activity. The WG responses to IEC comments have been reviewed by Tom P. and he highlighted those requiring further action. Vic is working on this. When this is done the NP can be issued. IEC has the final document draft (including edits). Page 3 of 6

4 4. IEC committees and work groups 4.1 IEC TC65 WG10 and ISO/IEC JTC1/SC27 (From January 21, 2016): Tom Phinney and John Cusimano have resolved the outstanding items related to Tom is a member of ACSEC (Ad hoc committee on security and privacy). He has received a document with the minutes from a December meeting in Frankfurt. There is another meeting scheduled for Milan. Tom will be receiving a document describing this group and will have two weeks to review. He will share it with WG ISO/IEC Revision (IT Asset Management) This group has a document out for review and comment. Jim will share with WG IEC TC57 WG15 (From January 21, 2016): Joe forwarded a note about the sharing of the master glossary with this group, which is meeting in Munich this week. There was a meeting in Munich. They have submitted a CV. Joe has a copy and will share. Their focus appears to be on protocols but it is described as end to end security. Several technical specifications (62351) are being considered for transition to standards. 5. Committee Planning and Direction 5.1 WG5-TG1: Editors task group (Jim G.) (From January 21, 2016): There was no update from this group. The immediate task is a final review of CDV. 5.2 Committee Work Product Release Schedule 5.3 Catalog of Requirements 6. External Initiatives 6.1 IEEE (From January 21, 2016): This is a new technical committee on communications cybersecurity. It will draw in work groups from other committees. They expect to be fully operational by EOY. Dennis will continue to monitor their activities. Page 4 of 6

5 6.2 Cybersecurity in Field Bus communications (FieldComm) There are meetings planned for the strategic technical committee (STC) and some work groups. Those wishing to learn more should contact Ragnar. 6.3 ISA Jim will circulate information on this standard. 7. Membership and Recruitment 8. Conferences and Events (From January 21, 2016): Joe will attend the FERC Forum. 8.1 INCOSE (From January 21, 2016): The INCOSE meeting will be held on January 31 through February 2 in Torrance CA. Pat Gouhin attended this meeting and Joe presented remotely. 8.2 ICSJWG The next meeting of this group will be in May. 8.3 Speaking events Joe is giving keynotes on ICS security at National Academy of Science and Engineering and Business Insurance Risk conference. 9. Other Committee Business / Issues 9.1 Work with Marathon on Level 1 security Work is underway and meetings are taking place. This group meets weekly at a time that is problematic for some of us. They asking for input and contribution from the ISA SP99 team. It is not clear what they are asking for, or if/how we may able to provide it. We have to be careful to properly set expectations. Once we have these defined we can determine our response. Joe will take this message back to the group leaders. (ACTION) 10. Meeting Close The meeting adjourned at approximately 11:50 ET Action Item Update ID Action Item Responsibility Status Comments 46 Speak to those leading the Marathon effort about the need to set clear expectations for assistance from our committee. Joe W. Open Page 5 of 6

6 10.2 Next call / Adjourn The next WG5 call is scheduled for February 18, 2016 at 11:00 ET US. Page 6 of 6