Two Management Systems, One Plant: ISO/IEC 27001:2022 in an OT Context, ISMS versus CSMS

Deep End Era. Engineering with Sankalp · Oct 28, 2026 · 1h 7m

Noor Haddad, the Al Sahil control systems security lead, and Henrik Dahl, the operating company's group information security manager, discover that they have been running two management systems for the same plant for five years, with two risk registers, two audit programmes and one very tired set of control engineers. Part one of The Deep End's IT and OT security series.

Chapters

00:00:00 Cold open: the same question, twice

00:03:58 What ISO/IEC 27001 is

00:11:43 What IEC 62443-2-1 is

00:14:44 Where they really differ

00:22:47 Where they are really the same

00:25:03 Two family trees

00:29:04…