[SCADASEC] – encryption requirements vis a vis privacy regulations

SCADASEC is a publicly-accessible (after you sign up) email list devoted exclusively to IT security issues as they pertain to our industry.

Not specific or necessarily immediately relevant to SCADA, but interesting because it points to possible architecture requirements for future systems that move personal or regulatorily-controlled data. –Lynne


[SCADASEC] Encryption requirements?

Tue, 06 Oct 2009 12:34:39 -0500

Bob Radvanovsky <rsradvan@unixworks.net>

All —

I came across this from another mailing list that deals with legal issues/aspects of IT systems, and their environments.  Although the spin on the series focuses mostly on credit card and electronic transaction processing, I believe that this raises issues about the use of, and the level of encryption for the SCADA/control systems industry.

To me, the main question is: how much is enough?

Alternatively, another question might be: will encryption help secure my environment(s)?

I don’t an easy answer for either question, but wanted to bring this to everyone’s attention.

The URL links are provided for your reading enjoyment.  There are four (4) parts, and are provided in their parted condition:

Part 1:

Part 2:

Part 3:

Part 4:
To unsubscribe from this mailing list, please visit:

To review our usage policy, please visit:


Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google+ photo

You are commenting using your Google+ account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )


Connecting to %s