While line 640 mentiones security, privacy, and reliability the section speaks of security at the communication layer only. ISO's need comply with NERC CIP Information Protection guidelines that should be described in the Information Model (see IRC Information Model and XML Schemas) to classify information, not only protect it.