Relevant Standards and Organizations 17 l l RBPS 17--Officials and Organization RBPS 18--Records Of these, RBPS 6 (Theft or Diversion), 7 (Sabotage), 8 (Cyber), 14 (Specific Threats, Vulnerabilities, or Risks), and 15 (Reporting of Significant Security Incidents) concern cyber security, with RBPS 8 focusing solely on cyber security. The CFATS RBPSs are not enforceable requirements at this time and are intended as guidance for chemical facilities. 14 ISA-99 ISA standard 99 (ISA-99) is an industrial control security standard created by the International Society of Automation (ISA) to protect SCADA and process control systems. ISA-99 offers varying security recommendations based on the physi- cal and logical location of the systems being protected as well as their importance to the reliable operation of the system. In order to accomplish this, ISA-99 first attempts to classify functional areas of an industrial system into specific security levels and then provides recommendations for separating these areas into "zones." ISA-99 also defines the interconnectedness of zones as well as how to enforce secu-