Thanks, Craig, for highlighting this - and sorry for getting back so late. I hope this response finds you since I don't have any other way of contacting you, although I'd love to.

I am in fact involved in quite some standardization work at IEC and ISA but had indeed not heard of P2808, so thanks for making me aware! We're starting a research project on the whole security engineering modelling topic in 2021. And I will put P2808 on the list of projects to watch and get involved in for next year for sure.