Glossary · Industrial cybersecurity
Safety-security interface
Also known as: safety and security interface
In integrated industrial systems, the safety-security interface is the point at which cybersecurity conditions can affect safety functions, safety data or risk controls, for example where a network connection can change safety parameters or disturb safety communication.
- Cybersecurity
- Standards
In one sentence
The safety-security interface is where cybersecurity conditions can affect safety functions, safety data or risk controls in a machine.
Example
The safety configuration of a laser scanner on an AGV can be changed over the plant network; this makes the configuration port a safety-security interface that needs authentication and change logging.
Explained in context
Context cards connect this term with others to answer one question. Also in British English and German.
How it applies
- Integrated systems: Identify each interface where security affects safety: safety parameter access, safety communication over shared networks, firmware of safety components, remote access and the data used by safety-relevant functions.
- Machine safety: The machine risk assessment should consider intentional manipulation as a cause of hazardous situations. The Machinery Regulation requires protection against corruption where it could lead to hazards.
- Cybersecurity: Security measures must not degrade safety. A patch, a firewall rule or an account lockout can delay or block a safety-relevant action; assess such effects before deployment.
- Technical documentation: Document the interfaces and their protection in both the safety and the security documentation, with cross-references, so neither team assumes the other has it covered.
Safety-security interface vs. safety function
A safety function is designed to reduce a specific risk. The safety-security interface is where that function, or its data, could be affected by security conditions. Functional safety and IEC 62443 each address their side; the interface is where they must be coordinated.