ChaptersEventsBlog
We're exploring how organizations adapt IAM to AI. Take the AI Identity and Risk Readiness Survey by September 5 →

Working Group

Industrial Control Systems

This working group aims to develop security guidance to encourage cloud providers, asset owners and device manufacturers towards adopting best practices to secure industrial control systems.
Cloud Industrial Internet of Things (IIoT) - Industrial Control Systems Security Glossary
Cloud Industrial Internet of Things (IIoT) - Industrial Control Systems Security Glossary

Download

Industrial Control Systems
Working Group Overview
The goal of this group is to develop security guidance to encourage cloud providers, asset owners and device manufacturers towards adopting best practices to secure industrial control systems. We welcome anyone who would like to join, even if you would like to just listen-in on your first call. 

What do we discuss? 
During these meetings we typically discuss changes in the industry and collaborate on projects the group is currently working on.

Drafts & Important Docs

Working Group Leadership

William Ho
William Ho

William Ho

Head of IT, Infrastructure and Security for ATT Systems Group

William is co-founder of Indonesia CIO network with over 25+ years of ICT background and extensive Business-Technology experience and exposure in IT infrastructure & Architecture design, Converged infrastructure solutions, Cloud Computing, Information Security, Data protection & security, Cloud Security, Disaster recovery/Business Continuity Management, Risk Management and Business-IT compliance.

Professionally, William is a professio...

Read more

Sabri Khemissa
Sabri Khemissa

Sabri Khemissa

Sabri is the ICS group cybersecurity officer a French multinational corporation that produce a variety of construction and high-performance materials. He is in charge of developing and maintaining the cybersecurity strategy, building and coordinate a cross-country and cross-business cybersecurity governance, supporting business initiatives, including strategic Smart Manufacturing and IIoT projects with a large shift to cloud services, defin...

Read more

Darnell Washington
Darnell Washington

Darnell Washington

Mr. Washington’s experience spans over 35 years in information technology and cybersecurity, He began his career at the Johns Hopkins Applied Physics Laboratory and has continuously progressive experience working developing architectures for banking and financial organizations such as the Federal Reserve and collaborating as a subject matter expert for the US Department of Homeland Security Federal Law Enforcement Training Center.

Hi...

Read more

Publications in ReviewOpen Until
Data Security within AI EnvironmentsAug 29, 2025
AICM Auditing GuidelinesSep 03, 2025
A Practitioner’s Guide to Post-Quantum CryptographySep 17, 2025
Cloud Threat Modeling 2025Sep 19, 2025
View all
Who can join?

Anyone can join a working group, whether you have years of experience or want to just participate as a fly on the wall.

What is the time commitment?

The time commitment for this group varies depending on the project. You can spend a 15 minutes helping review a publication that's nearly finished or help author a publication from start to finish.

Open Peer Reviews

Peer reviews allow security professionals from around the world to provide feedback on CSA research before it is published.

Learn how to participate in a peer review here.

Data Security within AI Environments

Open Until: 08/29/2025

 AI’s demand for large and diverse datasets introduces significant cybersecurity risks across the entire data lifecycl...

AICM Auditing Guidelines

Open Until: 09/03/2025

Auditing steps for each of the 243 controls of the AI Controls Matrix for internal or external auditors that are going to e...

A Practitioner’s Guide to Post-Quantum Cryptography

Open Until: 09/17/2025

As quantum computing advances, the threat it poses to classical cryptographic algorithms becomes increasingly urgent. This ...

Cloud Threat Modeling 2025

Open Until: 09/19/2025

The purpose of this document is to enable and encourage effective threat modeling for cloud applications, services, and sec...