ISO/IEC 24392:2023

ISO/IEC 24392 presents specific characteristics of industrial internet platforms (IIPs), including related security threats, context-specific security control objectives and security controls. It covers specific security concerns in the industrial context and thus complements generic security standards and reference models. This standard includes secure data collection and transmission among industrial devices, data security of industrial cloud platforms, and secure collaborations with various industry stakeholders.

The users of ISO/IEC 24392 are organizations who develop, operate, or use any components of IIPs, including third parties that provide services to the abovementioned stakeholders. ISO/IEC 24392 provides recommendations for users on how to protect IIPs against IIP-specific threats.