Safety implications of industrial uses of internet technology

This report examines the safety and health issues associated with the use of the internet and internet related technologies in and by industry. There is a great deal of pressure for an organisation to take up the internet, outside pressure from the customers and pressure from within. The technology to allow connection of manufacturing and control systems to the internet is easily available, but there is no real evidence that adequate consideration has been given to the security and stability of these devices and systems. There are also disadvantages in exposing internal systems (business or control) to the outside world. The quality of publicised safety-related data varies, and is potentially dangerous. Network integrity is paramount in any internet-based system that is used for control and automation, where a breach could have serious safety repercussions. This report and the work it describes were funded by the Health and Safety Executive. Its contents, including any opinions and/or conclusions expressed, are those of the author and do not necessarily reflect HSE policy All rights reserved. No part of this publication may be reproduced, stored in a retrieval system, or transmitted in any form or by any means (electronic, mechanical, photocopying, recording or otherwise) without the prior written permission of the copyright owner. Internet technology gives cheap and flexible capability that can change existing industry practice and make possible novel practice, and has the potential to give rise to safety concerns. HSE commissioned Tessella Support Services plc to outline the safety implications raised by the industrial use of internet and related technology. The emphasis was firmly on current actual use of the technology. A degree of future-gazing was also included to cover credible foreseeable uses. After detailed consideration of Tessella's findings, HSE has concluded that Internet technology raises no fundamentally new safety issues. However, the enhanced functionality and reduced costs mean that complex implementations are now more practical, and safety and security measures need to be thoroughly addressed. This would involve, in the context of safety issues, analysis of system, hardware and software and human factor issues. Key to HSE's technical strategy is the international standard IEC 61508 " Functional safety of electrical/electronic/programmable electronic safety-related systems ". Internet-related technical matters can be handled within this strategy, which offers a systematic approach to the safety of complex systems. Through no fault of the contractor, the publication of this report has been considerably delayed. Some of …