ODVA: Why Secure Industrial Communication Depends on Deployment as well as Protocols
April 22, 2026
Joint Industry Perspective from the Industrial Security Harmonization Group (ISHG)
The Industrial Security Harmonization Group (ISHG) has released a joint industry perspective highlighting a critical truth in industrial cybersecurity: secure industrial communication is not determined by protocols alone, but by how they are deployed and managed in real-world environments.
The ISHG—comprising leading industry organizations including the FieldComm Group, ODVA, OPC Foundation, and PROFIBUS & PROFINET International—collaborates regularly to align security concepts across Ethernet and non-Ethernet communication protocol technologies. Their shared mission is to reduce complexity for end users and promote consistent, effective cybersecurity practices in industrial automation systems.
Industrial communication protocols serve as the backbone of modern automation, enabling seamless connectivity between devices, systems, and applications across both process and factory environments. However, many widely used protocols were originally developed without cybersecurity as a primary design consideration.
The ISHG’s joint work challenges the simplistic binary classification of protocols as “secure” or “insecure.” Instead, it emphasizes a more practical and realistic approach:
- Security is context-dependent — It relies on how protocols are configured, where they are deployed, and the surrounding operational environment.
- Built-in security features are not sufficient alone — Even advanced protocols require correct implementation and maintenance.
- Compensating controls are essential — Network architecture, segmentation (zones and conduits), monitoring, and physical safeguards play a critical role, especially for legacy and non-Ethernet systems.
- This deployment-focused perspective aligns closely with emerging regulatory expectations, including those outlined in the EU Cyber Resilience Act (CRA) for hardware and software products and NIS2 for entities and organizations for operations.
Conference at Hannover Messe
The ISHG will present these insights during its session at Hannover Messe 2026, offering guidance to industry stakeholders on how to effectively secure industrial communication systems in practice.
Find details here HMI 2026 Conference “ISHG Security”
About ISHG
The Industrial Security Harmonization Group (ISHG) is a collaborative initiative of leading industrial communication organizations, including the FieldComm Group, ODVA, OPC Foundation, and PROFIBUS & PROFINET International, who are working to harmonize security approaches across Ethernet and non-Ethernet communication technologies and to simplify cybersecurity implementation for end users.
Also, the ISHG has released a new technical paper: “Secure Deployment of Industrial Communication Protocols: A Risk-Based Approach” that is available here: https://www.odva.org/wp-content/uploads/2026/04/Secure-Deployment-of-Industrial-Communication-Protocols-A-Risk-Management-Based-Approach-PI-FCG-OPCF-ODVA-v01.00.pdf
For more information, visit:
Related Story
Joint Press Release from ODVA, OPC Foundation, PI and VDMA
Accurate energy consumption data is essential for companies aiming to achieve climate-neutral production. To support this goal, a consortium of organizations including ODVA, OPC Foundation, PI, and VDMA have recently published a groundbreaking specification for interoperable and efficient energy management in industrial and process automation.
