top of page

The Evolution of Standards Development: A Lesson for Cybersecurity

How Engineering Standards Shaped Progress

Throughout history, technical standards have defined how humanity builds, measures, and innovates.  Standards Development Organizations (SDOs) such as ASTM International, IEEE, and ASME brought order to complexity, ensuring consistency, safety, and reliability in civil, mechanical, structural, and medical engineering.  These bodies did not appear overnight; they emerged from necessity during the Industrial Revolution, when informal craftsmanship gave way to scientific design and verified performance.

 

From Craft to Discipline

Before formal standards, knowledge was shared through apprenticeship and trial-and-error. The Industrial Revolution changed everything. Rapid industrial growth required uniform measurements, material testing, and design protocols.


Early initiatives, such as standard rail gauges and screw threads, demonstrated that shared technical specifications could unify entire industries. By the mid-19th century, societies such as IMechE (1847) and ASCE (1852) organized engineers around documented best practices.


Soon, dedicated SDOs, ASTM (1898) and ANSI (1918), transformed these collaborations into enforceable, real-world technical standards that strengthened bridges, made machines safer, and enabled scalable manufacturing.

 

Cybersecurity - A Field Without True Engineering Standards

Cybersecurity has evolved without the benefit of formally recognized technical standards.  While frameworks such as NIST and ISO provide essential governance and compliance guidance, they stop short of defining how to engineer security into systems. This gap leaves practitioners operating in fragmented environments—relying on vendor tools, ad hoc configurations, and inconsistent design practices.


In a world where digital infrastructure underpins economies, public safety, and national security, the absence of measurable, engineering-grade standards has become a critical vulnerability.

 

ISAUnited - Advancing Cybersecurity Through Engineering

ISAUnited was created to close this gap.


As the first dedicated Standards Development Organization (SDO) for Cybersecurity Architecture and Engineering (CAE), ISAUnited brings the same rigor, peer review, and technical depth that traditional engineering fields have long enjoyed.
Building on the guidance of NIST and ISO, ISAUnited’s Defensible Standards, including the Defensible 10 Standards (D10S), extend cybersecurity into engineering practice by defining measurable inputs, technical specifications, and verifiable outcomes.

 

A Moral and Professional Imperative

Cybersecurity now affects lives, critical services, and national resilience. Establishing defensible standards is not simply a technical ambition; it is a moral responsibility.


ISAUnited’s vision is to elevate cybersecurity to stand beside civil, mechanical, and systems engineering—disciplines defined by clarity, discipline, and practicality rather than checklists and chasing SaaS tools.

 

Join the Movement

Just as 19th-century engineers united to standardize their craft, today’s cybersecurity professionals have the same opportunity and obligation.  ISAUnited invites practitioners, researchers, and industry leaders to participate in this transformation through the Defensible 10 Standards and annual Open Season for Sub-Standards development.

 

Together, we can engineer a secure digital future and establish cybersecurity as a recognized, defensible engineering discipline.

bottom of page