NAMUR Security Task Force
Focus
The Security Task Force deals with overarching and coordination-intensive issues for NAMUR operators in Germany. The focus here is on:
- Coordination and dialogue with industry associations on overarching issues and their implications for OT security (e.g. VCI, ZVEI)
- Avoiding duplicate assessments (e.g. due to TRBS 1115-1 and KAS51)
- Commenting on and evaluating laws and draft legislation (e.g. NIS2, CRA), as well as deriving recommendations from them
- Identifying and prioritising topics for security work (e.g. topics of a cross-security nature, requiring extensive coordination with other working groups or involving formal requirements)
- Preparing forward-looking proposals for decision by the NAMUR Executive Board
Benefits / Objectives
The task force was established in spring 2025 to address issues that cannot be resolved within the existing working framework of Working Group 4.18 (Automation Security), for example due to the workload involved. The aim is to deliver concrete, actionable results for NAMUR member companies:
- Preparation of decision-making documents for the NAMUR Executive Board and NAMUR position papers in the field of OT security
- Reference tables to avoid duplication of checks
- Assessment papers on relevant legislation and draft legislation, including recommendations for action
- Greater and more targeted involvement of the Executive Board in critical issues
- Clear prioritisation of new cross-cutting OT security issues for working groups and task forces
Current projects and developments
- Development of a basis for decision-making regarding the demarcation of responsibilities and cooperation with associations (e.g. ZVEI, VCI, BSI, etc.) [completed and presented at the NAMUR General Assembly 2025]
- Creation of a reference table to avoid duplicate testing [completed via the revised VCI position paper “Cybersecurity in the process industry – implementation and testing”]
- Analysis of the impact of the Cyber Resilience Act (CRA) on users. Cross-association work to achieve a manageable implementation by manufacturers for the process industry.
- Cross-working group identification of critical factors for the success of APL / PROFINET.
- Regular topic scouting and proposal drafting