This document provides information security controls for the energy utility industry, based on ISO/IEC 27002:2022, for controlling and monitoring the production or generation, transmission, storage and distribution of electric power, gas, oil and heat, and for the control of associated supporting processes. This includes in particular the following:


—    central and distributed process control, monitoring and automation technology as well as information systems used for their operation, such as programming and parameterization devices;


—    digital controllers and automation components such as control and field d...