Abstract
This paper describes implementation of a guideline, OLF104, focusing on safety and security in distributed control systems integrated with Information and Communication Technology (ICT). Increased networking and increased use of ICT impacts the complexity and vulnerability of the systems. The risk assessment is challenging due to complexity and uncertainty. The guideline was developed in collaboration between the industry association, operators and suppliers. Open discussion and knowledge sharing at interfaces between the collaborators, supported the need for a guideline. Key issues to improve safety and security are systematic knowledge creation through socialization and externalization between ICT and process experts. The guideline OLF104 is used in the Norwegian oil and gas industry, by operators and through audits, but should influence working procedures more. The guideline has improved resilience. The impact of the guideline on safety and security should be systematically assessed. Improvement of experience and knowledge related to safety and security of distributed control systems could improve the guidelines
