For years, the IEC 62443 standards have served as the primary reference for OT cybersecurity - in part due to lack of alternatives in the niche. A game-changing alternative exists that demands the attention of the community. SAE, renowned for its contributions to the transportation industry, has introduced a standard for cyber-physical system security.
SAE did not try to repeat the traditional approach of long lists of controls that expire when you have a different use case or old, cumbersome, and subjective risk analysis methods that lead to easily "cooking the books."
Kenneth Crowther describes the SAE approach and its three pillars. He compares and contrasts this to 62443, using a compelling series of stories surrounding an electric vehicle charging station.