Security in Industrial Communication: Implementation Conditions Are as Critical as Protocols

[Semih Asil]

A critical truth has emerged regarding communication for industrial safety: security in industrial communication depends not only on protocols but also on how these protocols are implemented and managed in a real-world environment.

The Industrial Security Harmonization Group (ISHG) has published a joint statement on this approach. ISHG brings together leading industry organizations such as FieldComm Group, ODVA, OPC Foundation, and PROFIBUS & PROFINET International to work on harmonizing security concepts across Ethernet and non-Ethernet protocols. The goal is to reduce complexity and promote effective cybersecurity practices in industrial automation systems.

### Industrial Communication Protocols and Security

Communication protocols, the backbone of modern automation, provide seamless connectivity between devices, systems, and applications. However, most commonly used protocols were designed without cybersecurity as a priority.

ISHG emphasizes that simply classifying protocols as "secure" or "insecure" is insufficient. Security depends on:

• The context and configuration in which protocols are used,
• The conditions of the environment in which they are implemented,
• Environmental and operational factors.

Furthermore:

• Built-in security features of protocols alone are not enough.
• Correct implementation and continuous maintenance are necessary.
• Complementary measures such as network architecture, segmentation (zones and conduits), monitoring, and physical protections are vital, especially in older and non-Ethernet systems.

### Regulatory Compliance and Practical Approaches

This approach is also consistent with new regulations such as the EU Cyber Resilience Act (CRA), which affects both hardware and software products, and NIS2, which covers operational assets and organizations.

### ISHG Presentation at Hannover Messe 2026

ISHG will present these important insights to the industry at Hannover Messe 2026, providing guidance on how to effectively protect industrial communication systems.

### About ISHG

The Industrial Security Harmonization Group (ISHG) is a joint initiative of leading communication organizations such as FieldComm Group, ODVA, OPC Foundation, and PROFIBUS & PROFINET International. Their aim is to harmonize security practices across different communication technologies and simplify cybersecurity for users.