The International Society of Automation (ISA) Special Publication (SP) 99 (ISA SP 99) is a standard that explains the process for establishing an industrial automation and control systems security program through risk analysis, establishing awareness and countermeasures, and monitoring and improving an organization's cybersecurity management system.