Recent cyber attacks on industrial sites around the world have highlighted the need for manufacturers to have sound cyber defence and a good overall security policy. Responding to the threat many control system owners have developed a security culture to combat cyber threats from both within the company and from external sources.
A cyber security policy is like a health and safety policy, but for computers and control systems and, like a health and safety policy, every company should have one. Once established, a security policy works better as an on-going process rather than being treated as a one-off project. Company security culture is about encouraging staff to understand, observe and respect the corporate security policy irrespective of whether they are in the workplace, or not, or accessing it remotely.