SCSC - Group: Security Informed Safety

If you have been given the code to join this group please login and then enter the code here.

Security Informed Safety Working Group

SCSC SSS 2022 Working Group Update

The PowerPoint presentation given at SSS'22 can be found here.

A link to the video of the presentation is here.

Updates given at previous SSS conferences can be found here.

Statement of the Problem

Security of safety-critical systems is becoming more and more of an issue with ever changing threats, attacker skills and changes to the way software and systems are developed (i.e. greater reliance on COTS and supply chain). A system can only be deemed safe if it is also secure to enable it to carry out its safety function; this is true for both new and legacy systems. It is acknowledged over recent years many standards have been produced or are in production; often these are domain specific and are evolutions of IT based standards and good practice rather than considering established safety defence in depth design principles such as diversity and redundancy.

Why is the SCSC involved?

Due to the nature of the SCSC being cross domain and non-profit making, it provides an opportunity for experts from different domains and academia to come together to network and share best practice and experience.

What will the Working Group do?

The working group will aim to capture cross-domain best practice to help engineers find the ‘wood through the trees’ with all the different security standards, their implication and integration with safety design principles to aid the design and protection of secure safety-critical systems and systems with a safety implication.
The working group will aim to keep current with the fast changing security threats and new standards being published.

If you would like to join this group and contribute please contact Stephen Bull


To produce clear and current guidance on methods to design and protect safety-critical systems, in a way that reflects emerging best practice. This guidance will reflect the integration of safety and security principles.

Terms of Reference and working group goals are available in the SISWG resource area.

Current Activities

We have established task groups to provide guidance in specific key areas relating to the impact of Cyber Security on Safety. It is intended that this guidance will be published as SCSC documents, although it will be aligned to the recently published IET Code of Practice on Cyber Security and Safety.

The task groups are looking at:

  1. Co-ordination of Safety and Security within the system lifecycle
  2. Principles on Evaluation of Risk
  3. Mapping terminology and language between safety and security

Initial guidance documents are available for review. Our current focus for review is explained in the latest meeting minutes here. Please return comments by 17th July 2022.

If you would like further information, please contact Stephen Bull

Next meeting - September 2022

This meeting will review the feedback from the current review cycle (see above) and identify next steps.

For any further information, contact Stephen Bull



SCSC.UK uses anonymous session cookies please see Privacy policy

© SCSC 2022