ICT security and independence

The Petroleum Safety Authority Norway's (PSA) regulations set requirements for independence between systems in both the Management Regulations and the Facilities Regulations. There are also equivalent requirements in, for example, IEC 61508 and IEC 61511, which are cited in the guidelines to the regulations. This report assesses whether these requirements will be challenged by possible future technical solutions and how these requirements can be met. Our focus is on major accidents and not dependencies that can result in lost production only. When assessing ICT security in industrial ICT systems (OT systems), we mainly address availability and integrity related to intentional incidents. The report is a translation of the SINTEF report 2021:01387 (in Norwegian).