CYBERSECURITY GOVERNANCE MECHANISM OF INDUSTRIAL CONTROL SYSTEMS UNDER THE BACKGROUND OF INTELLIGENT MANUFACTURING

Abstract

With the advancement of intelligent manufacturing, industrial control systems (ICSs) are transforming towards IT/OT convergence and cloud-edge collaboration, leading to the disintegration of the boundaries of traditional closed industrial control networks and a surge in security risks. The existing governance mechanisms still suffer from such problems as an imperfect system, ambiguous rights and responsibilities, and disconnection between technical and management practices. Based on the risk governance theory and the whole life cycle concept, and in alignment with the IEC 62443 standard and domestic policies on industrial control security protection, this paper constructs an ICS cybersecurity governance mechanism featuring a three-dimensional governance framework, closed-loop full-process operation and multi-stakeholder collaborative linkage. The mechanism clarifies the rights and responsibilities of the government, enterprises, suppliers and other parties, designs a full-process system including risk identification, protection implementation, monitoring and early warning, emergency response, and continuous improvement, and proposes an implementation path of three-dimensional integration of technology, management and operation. It also divides the implementation steps into three phases: basic construction, in-depth construction and optimization and upgrading, with supporting guarantee measures in four aspects: policy, technology, resources and collaboration. This mechanism can effectively reduce the incidence of security incidents and improve the efficiency of emergency response, providing theoretical and practical support for the safe and stable operation of ICSs in intelligent manufacturing scenarios.