An industrial control system that includes a cloud platform facilitates secure execution of command data for an industrial device in communication with the cloud platform. The system includes an interface component, a validation component and an execution component. The interface component transmits industrial data associated with an industrial device to the cloud platform that analyzes the industrial data. The interface component also receives, from the cloud platform, command data for the industrial device that is generated based on the industrial data. The validation component validates the command data received from the cloud platform based on execution data indicative of a set of conditions for the command data. The validation component also establishes a secure communication link with the industrial device in response to a determination that the command data is approved for execution on the industrial device. The execution component initiates execution of the command data via the industrial device.