In industrial networks, where performance is crucial, introducing
additional functionality comes at a cost and tradeoffs
must be considered. Careful consideration must be given
to which security services are implemented, and new threats
must be identified and addressed. As discussed in the previous
paragraph, security in industrial networks was at first an
afterthought. Access control and integrity mechanisms that
prevent unauthorised modification of network parameters is an
obvious requirement and was once considered to be adequate
security. However, in recent times confidentiality has also
become important, as information about industrial processes
become an attractive target for commercial competitors looking
to improve their own industrial processes. In addition to
technical security services, organisations should implement an
accepted information security management system, such as
detailed in ISO/IEC 27001. This means that the organisational
processes are in place to deal with security issues as they arise,
which is especially useful in industrial networks where new
security threats can be identified at any time as research in
this area increases.