ISO/IEC 24392:2023
Cybersecurity — Security reference model for industrial internet platform (SRM- IIP)
This document presents specific characteristics of industrial internet platforms (IIPs), including related security threats, context-specific security control objectives and security controls.
This document covers specific security concerns in the industrial context and thus complements generic security standards and reference models. In particular, this document includes secure data collection and transmission among industrial devices, data security of industrial cloud platforms, and secure collaborations with various industry stakeholders.
The users of this document are organizations who develop, operate, or use any components of IIPs, including third parties who provide services to the abovementioned stakeholders.
This document provides recommendations for users on how to protect IIPs against IIP-specific threats.
| Get this standard | Prices exclude GST | |
|---|---|---|
| PDF ( Single user document) |
$286.09 NZD
|
|
| HardCopy |
$323.48 NZD
|
|
| Networkable PDF |
Price varies
|
Foreword
Introduction
1 Scope
2 Normative references
3 Terms and definitions
4 Abbreviated terms
5 Overview
6 IIP-specific security threats to industrial internet platforms
6.1 Characteristics of IIPs
6.2 Security threats to IIPs
7 Security reference model of industrial internet platform
7.1 General
7.2 Security domains of IIPs
7.2.1 General
7.2.2 Edge security domain
7.2.3 Cloud infrastructure security domain
7.2.4 Platform security domain
7.2.5 Application security domain
7.3 System life cycle
7.3.1 General
7.3.2 Development and production stage
7.3.3 Utilization and support stage
7.3.4 Retirement stage
7.4 Business scenarios and roles
7.4.1 General
7.4.2 Production optimization
7.4.3 Product customization
7.4.4 Multilevel security production
7.4.5 Transnational cooperation
8 Security objectives and controls for IIPs
8.1 Security objectives
8.2 Security controls
8.2.1 General
8.2.2 Physical security
8.2.3 Network security
8.2.4 Access security
8.2.5 Communication security
8.2.6 System security
8.2.7 Application security
8.2.8 Operation and maintenance security
8.2.9 Security management
Annex A (informative) Typical IIP use cases
Bibliography
Keep me up-to-date
Sign up to receive updates when there are changes to this standard
Related Information
Similar Standards
-
AS/NZS ISO/IEC 27001:2023
Information security, cybersecurity and privacy protection – Information security management systems – Requirements
-
AS/NZS ISO/IEC 27001:2023 A1
Information security, cybersecurity and privacy protection - Privacy enhancing data de-identification framework
-
AS/NZS ISO/IEC 27002:2022
Information security, cybersecurity and privacy protection — Information security controls
-
AS/NZS ISO/IEC 27011:2025
Information security, cybersecurity and privacy protection – Information security controls based on ISO/IEC 27002 for telecommunications organizations
Foreword
Introduction
1 Scope
2 Normative references
3 Terms and definitions
4 Abbreviated terms
5 Overview
6 IIP-specific security threats to industrial internet platforms
6.1 Characteristics of IIPs
6.2 Security threats to IIPs
7 Security reference model of industrial internet platform
7.1 General
7.2 Security domains of IIPs
7.2.1 General
7.2.2 Edge security domain
7.2.3 Cloud infrastructure security domain
7.2.4 Platform security domain
7.2.5 Application security domain
7.3 System life cycle
7.3.1 General
7.3.2 Development and production stage
7.3.3 Utilization and support stage
7.3.4 Retirement stage
7.4 Business scenarios and roles
7.4.1 General
7.4.2 Production optimization
7.4.3 Product customization
7.4.4 Multilevel security production
7.4.5 Transnational cooperation
8 Security objectives and controls for IIPs
8.1 Security objectives
8.2 Security controls
8.2.1 General
8.2.2 Physical security
8.2.3 Network security
8.2.4 Access security
8.2.5 Communication security
8.2.6 System security
8.2.7 Application security
8.2.8 Operation and maintenance security
8.2.9 Security management
Annex A (informative) Typical IIP use cases
Bibliography