IEC 62443-4-1-ed.1.0

Detail information

Designation: IEC 62443-4-1-ed.1.0

Publication date: 15/01/2018

Pages: 54

Country: International technical standard

Where to buy?

You can buy at www.mystandards.biz

Anotation

IEC 62443-4:2018 specifies the process requirements for the secure development of products used in industrial automation and control systems. This specification is part of a series of standards that addresses the issue of security for industrial automation and control systems (IACS). IEC 62443-4 defines secure development life-cycle (SDL) requirements related to cyber security for products intended for use in the industrial automation and control systems environment and provides guidance on how to meet the requirements described for each element. The life-cycle description includes security requirements definition, secure design, secure implementation (including coding guidelines), verification and validation, defect management, patch management and product end-of-life. These requirements can be applied to new or existing processes for developing, maintaining and retiring hardware, software or firmware. Note that these requirements only apply to the developer and maintainer of the product, and are not applicable to the integrator or the user of the product. A summary list of the requirements is provided in Annex B. LIEC 62443-4:2018 specifie les exigences relatives au processus de developpement securise des produits utilises dans des systemes dautomatisation et de commande industriels. Elle definit un cycle de developpement securise (SDL – secure development life-cycle) en vue de developper et dassurer la securite des produits. Ce cycle inclut la definition des exigences de securite, la conception securisee, la mise en ouvre securisee (y compris les lignes directrices en matiere de codage), la verification et la validation, la gestion des defauts, la gestion des correctifs et la fin de vie du produit. Ces exigences peuvent etre appliquees a des processus nouveaux ou existants pour le developpement, la maintenance et le retrait des materiels, logiciels et micrologiciels destines aux produits nouveaux ou existants. Elles sappliquent au developpeur et au charge de maintenance du produit, mais pas a lintegrateur ni a lutilisateur du produit. Une liste recapitulative des exigences du present document peut etre consultee a lAnnexe B.