Whether you agree with me that testing prior to determining the final SP100 standard is a good thing, I don't think anybody will disagree with Wayne Manges' comment in the announcement of the ACI that we will be using the ACI to test compliance to the S100 standard AFTER one is released.
And this is a fitting place to put the Control System Security Foundation that Eric and Joanne Byres have been working on the feasibility study for all summer.
ISA is about the only place this could have a chance of working...and I'm glad to see it. It will strongly benefit the end users, and give ISA another piece of that mission and value-add they've been missing.
It will also add to ISA's ability to call itself a global organization, too, since it will be administering compliance testing for both ANSI and IEC standards. This will raise its visibility in the minds of users who don't happen to live in the United States or Canada or Mexico more quickly and more decisively than anything else I can imagine.
See, I don't always say bad things about ISA...
