AMERICAN NATIONAL STANDARD ANSI/ISA-62443-1-1 (99.01.01)-2007 (formerly designated as ANSI/ISA-99.00.01-2007) Security for Industrial Automation and Control Systems Part 1-1: Terminology, Concepts, and Models Approved 29 October 2007 Copyright Int ANSI/ISA-62443-1-1 (99.01.01)-2007 -3- Preface This preface, as well as all footnotes and annexes, is included for information purposes and is not part of ANSI/ISA-62443-1-1 (99.01.01)-2007. This document has been prepared as part of the service of ISA, toward a goal of uniformity in the field of instrumentation.Tobeof real value,thisdocumentshouldnotbestaticbutshouldbesubjecttoperiodic addressed to the Secretary, Standards and Practices Board; ISA; 67 Alexander Drive; P. O. Box 12277; [email protected]. It is the policy of isA to encourage and welcome the participation of all concerned individuals and interests in the development of ISA standards, recommended practices, and technical reports. Participation in the individual, of ISA, or of any of the standards, recommended practices, and technical reports that ISA develops. CAUTION - ISA adheres to the policy of the American National Standards Institute with regard to complying with the standard or a license on reasonable terms and conditions that are free from unfair discrimination. Even if iSA is unaware of any patent covering this standard, the user is cautioned that implementation of the standard may require use of techniques, processes, or materials covered by patent rights. ISA takes no position on the existence or validity of any patent rights that may be involved in implementing the standard. ISA is not responsible for identifying all patents that may require a license before implementation of the standard or for investigating the validity or scope of any patents brought to its attention. The user should carefully investigate relevant patents before usingthestandardforthe user's intendedapplication. However, ISA asks that anyone reviewing this standard who is aware of any patents that may impact implementation of the standard notify the ISA Standards and Practices Department of the patent and its owner. Additionally, the use of this standard may involve hazardous materials, operations or equipment. The standard cannot anticipate all possible applications or address all possible safety issues associated with use in hazardous conditions. The user of this standard must exercise sound professional judgment concerning its use and applicability of any governmental regulatory limitations and established safety and health practices before implementing this standard. Copyright 2007 ISA. All rights reserved. ANSI/ISA-62443-1-1 (99.01.01)-2007 - 4- The following participated as voting members of ISA99 in the development of this standard: NAME COMPANY B. Singer, Chair Fluid IQs R. Webb, Managing Director Consultant E. Cosman, Lead Editor The Dow Chemical Co. R. Bhojani. Bayer Technology Services M. Braendle ABB D. Brandl BR&L Consulting, Inc. E. Byres Byres Security, Inc. R. Clark Invensys Systems, Inc. / Wonderware A. Cobbett BP Process Control Digital Protection J. Dalzon ISAFrance T. Davis Citect R. Derynck Verano, Inc. R. Evans Idaho National Laboratory R. Forrest The Ohio State University J. Gilsinn NIST/MEL T. Glenn Yokogawa T. Good E I DuPont De Nemours & Co E. Hand Sara Lee Food & Beverage M. Heard Eastman Chemical Co. D. Holstein OPUS Publishing C. Hoover Rockwell Automation B. Huba Emerson Processing Management M. Lees Schering-Plough Corp. C. Mastromonico Westinghouse Savannah River Co. D. Mills Procter & Gamble Co. G. Morningstar Cedar Rapids Water Dept. A.Nangia 3M J. Nye ExxonMobil Research and Engineering T. Phinney Honeywell ACS Adv Tech Lab E. Rakaczky Invensys Systems Canada Inc. C. Sossman WGl-W Safety Management Solutions LLC L. Steinocher Fluor Enterprises, Inc. I. Susanto Chevron Information Technology Co. B. Taylor The George Washington University D. Teumim Teumim Technical LLC D. Tindill Matrikon Inc. L. Uden Lyo