IEC 62351 - Power Systems Communication Security 13:5: Part 13, clause 5: security requirements for users and applications interacting with automation systems (risk assessment, security policies and requirements; user-focused procedures and techniques)

Standards dealing with how people, software applications and smart devices interact should cover risk assessment, security requirements and security policies, and user-focused cybersecurity procedures and techniques, with emphasis on policy and procedure and on roles and authorisation rather than cryptography.