Issue link: https://www.e-digitaleditions.com/i/1386104
62 I ICT TODAY task group that a new chapter be developed to address cybersecurity. Each technical committee was asked to review the newly added cybersecurity chapter. During the second draft meetings, the Technical Committee on Fundamentals took ownership of the new chapter. The biggest challenge for this new chapter is what to include; more specifically, where should that line of protection be drawn? The first decision was to establish the definition of cybersecurity as follows: CYBERSECURITY IN NFPA 72 Chapter 11, Cybersecurity 11.1 Application "Where cybersecurity is required by a risk analysis, by federal, state, or local regulation, or by the authority having jurisdiction, systems shall be in accordance with the requirement of this chapter." "The three documents that the new Chapter 11 includes is ANS/ISA-62443, Security for Industrial Automation and Control Systems Series; NIST Framework for Improving Critical Infrastructure Cybersecurity; UL 2900, Software Cybersecurity for Network-Connectable Products." 3.3.69 Cybersecurity "The protection of systems from theft or damage of data, or damage to hardware or software, as well as from unauthorized command or control of access to any information of any services the systems provide." With a working definition, the committee's next big challenge was to develop a charging statement for the newly-formed chapter. Understanding the ever-evolving cybersecurity landscape, the Technical Committee followed the process of how new material is intro- duced into the code: start with a charging statement and provide copious reference material in the Annex, located in Annex J. The current charging statement reads as follows: With the lengthy process of code development, why did it take so long to include cybersecurity in the code? In order to answer that question, it is important to first have a look at the history of the fire alarm code. Prior to the 2010 edition of NFPA 72, the fire alarm code only addressed fire alarms. As the technologies evolved and more and more building systems began migrating to Ethernet networks, it was inevitable that the fire alarm codes would change as well. In 2010, the official name of NFPA 72 was changed to the National Fire Alarm and Signaling Code to reflect that year's major changes, including the newly-formed Chapter 24, Emergency Communications Systems, and the addition of the Inspection, Testing and Maintenance (ITM) of fire alarm and emergency commu- nications systems. Slowly, there began an integration of fire alarm and emergency communications systems, driven by a myriad of reasons. During this time, discussions around cybersecurity began but were not officially addressed until 2017 when the first draft meetings for the 2019 edition of NFPA 72 were held. A task group to address cybersecurity was formed. Public Comment 540 was the first comment to address cybersecurity. Although information was submitted for the 2019 edition, it was voted down. The Chair of the Correlating Committee realized that cybersecurity was becoming a much more important issue for NFPA. As part of the 2022 Edition first draft meetings, he directed each Technical Committee to address the issue of cybersecurity as it pertained to their chapter. A larger task group was formed and included members of each Technical Committee. It was the recommendation of this