Strange bedfellows

In the UK, we bemoan that the term "engineer" covers a very wide spectrum, from the mathematical analyst to the washing machine fitter. Because of this, the term has been devalued and misunderstood. Our European counterparts rate their engineers on a par with doctors, lawyers and other professions, one of the more desirable things we have failed to import from Europe.

But when it comes to safety and security, the tables are turned. In Germany, the word for "safety” and "security” is the same: Sicherheit.

In English, we do have separate words for safety and security, but how clearly do we grasp the difference? Security comes from the Latin root secura, meaning "free of concern." Safety comes from salvus, which means "healthy," thus giving it a more personal meaning.

"I'm worried about the security of your home," implies "Does someone know how to get past your locks?"

"I'm worried about the safety of your home," implies it's a tinder box, in a flood plain, or built over nuclear waste!

"Safe and Secure" is a common expression where the two are coupled together, and used almost interchangeably. The two adjectives are similar in meaning and usage, but to illustrate the subtle difference imagine a child in a playpen. The playpen is safe because the child cannot be injured by the play pen, and it is secure because the child cannot leave it unless an adult lets it out. Thus the child is both safe and secure.

However, when it comes to plant integrity, maybe the Germans have it right, and we really need to start putting them together. Increasingly, we need to make sure we’re making the same commitment to both. Process safety and cybersecurity can be deeply intertwined, and because process industries are steeped in safety culture (because the consequences tend to be severe), there is much that security can learn from the more long-standing philosophy of safety.

For when a security issue is real, safety takes a hit as well. In 2008, hackers in Turkey used an Internet connection to compromise the cameras and sensors used to monitor an oil pipeline, modifying the alarm management system to mute alarms, and creating pressure inside the line to cause an explosion. To avoid instances like this becoming commonplace, we need to respect both terms.