Joint Industry Perspective Released by the Industrial Security Harmonization Group (ISHG)

Why It Matters

By reframing security as a deployment issue, the ISHG guidance pushes manufacturers and integrators to adopt holistic controls, helping them meet stricter regulatory standards and reduce cyber risk in critical automation environments.

Key Takeaways

• Security hinges on protocol configuration, not just protocol type
• Legacy systems need network segmentation and monitoring for protection
• Compensating controls bridge gaps in built‑in protocol security
• ISHG guidance aligns with EU CRA and NIS2 expectations

Pulse Analysis

The Industrial Security Harmonization Group’s new perspective marks a shift from a protocol‑centric view of industrial cybersecurity to a deployment‑focused mindset. While Ethernet‑based standards have evolved with security in mind, many legacy and non‑Ethernet protocols were designed without threat modeling. ISHG argues that the real determinant of safety is how these protocols are configured, integrated, and maintained within an operational environment, urging stakeholders to treat security as a contextual attribute rather than a binary label.

Regulators are echoing this sentiment. The European Union’s Cyber Resilience Act (CRA) and the NIS2 directive both demand that manufacturers embed robust security practices throughout the product lifecycle, extending beyond mere protocol specifications. For vendors, this translates into rigorous documentation, secure update mechanisms, and demonstrable compensating controls such as zone‑conduit architectures, continuous monitoring, and physical safeguards. Aligning with these mandates not only mitigates compliance risk but also enhances market confidence for industrial automation solutions.

At Hannover Messe 2026, ISHG will showcase practical guidance for implementing these principles, offering a roadmap that blends standards from FieldComm, ODVA, OPC Foundation, and Profibus & Profinet International. Attendees can expect actionable recommendations on network segmentation, intrusion detection, and lifecycle management that reconcile legacy equipment with modern security expectations. As the industry converges on a unified security posture, the ISHG perspective provides a timely framework for reducing complexity while bolstering resilience across global supply chains.