Safety and Security Interplay
The safety and security interplay is the interdependence of functional safety and cybersecurity in industrial systems, where attacks can defeat safety functions and security controls must not compromise safe operation.
The safety and security interplay describes how functional safety, which protects people, plant and environment from hazards caused by system failures, and cybersecurity, which protects systems from deliberate attack, depend on each other in industrial automation. A cyberattack can disable or spuriously trigger a safety function, and badly designed security measures can interfere with safe operation, so the two disciplines must be managed together.
The risk became concrete with TRITON, malware discovered in 2017 that targeted safety instrumented system controllers at an industrial facility. IEC 61511, the functional safety standard for the process industry, requires a security risk assessment for safety instrumented systems, and IEC 62443 provides the security methods. IEC TR 63069 provides a framework for applying functional safety and security standards together.
Practical measures include keeping safety systems in separate zones with tightly controlled conduits, controlling programming access to safety controllers through physical key switches and procedures, monitoring for unauthorised changes and assessing security updates for their effect on safety functions before installation. Safety functions must never depend on systems outside the safety design, such as analytics or AI layers. Safety systems are governed by IEC 61508, IEC 61511 or machinery standards, the OEM documentation and qualified personnel.
Key points
- Cyberattacks can disable or spuriously trigger safety functions
- TRITON targeted safety instrumented system controllers
- IEC 61511 requires a security risk assessment for safety instrumented systems
- Safety functions must not depend on systems outside the safety design
Where AiVibe comes in
AiVibe's AiAmbA AI Factory does not replace a machine's control or safety systems, and robot safety functions follow ISO 10218 and never depend on the AI layer.
Related terms
- TRITON (TRISIS) MalwareOT & Industrial Cybersecurity
- IEC 62443 (ISA/IEC 62443)OT & Industrial Cybersecurity
- IEC 62443-3-2 Security Risk AssessmentOT & Industrial Cybersecurity
- Zones and ConduitsOT & Industrial Cybersecurity
- Defence in DepthOT & Industrial Cybersecurity
- Collaborative Robot (Cobot)Robotics & Physical AI