ISO/IEC 27019 is a set of guiding principles for information security management of the process control systems (PCS) used in the energy utility sector. The main aim of the document is to increase the breadth of...

ISO/IEC 27019 is a set of guiding principles for information security management of the process control systems (PCS) used in the energy utility sector. The main aim of the document is to increase the breadth of the ISO/IEC to the automation technology and PCS domain. This is to provide a specific and standardised Information Security Management System (ISMS) to protect the hardware and software technology systems responsible for monitoring and controlling the generation, transmission, storage, and distribution of oil, gas, electric power, and heat, among other energy utilities. ISO and IEC first published ISO 27019 in 2013 as a Technical Report (TR), made by fast-tracking a DIN standard. In 2017, a second edition of the standard was published, making it a full International Standard in harmony with the 2013 version of ISO 27001 and ISO 27002. So, why is ISO 27019 so important?