GB/T 42457-2023 Active
GB/T 42457-2023 Security for industrial automation and control systems—Secure product development lifecycle requirements
Abstract
This document specifies the process requirements for the development of information security for industrial automation and control system products. It defines a security development lifecycle (SDL) for developing and maintaining secure products. This lifecycle includes security requirement definition, security design, security implementation (including coding guidelines), verification and validation, defect management, patch management, and product retirement. These requirements can be applied to new or existing processes for developing, maintaining, and phasing out new or existing product hardware, software, or firmware. These requirements apply to product developers and maintainers, but not to product integrators or users. A summary list of the requirements of this document is provided in Appendix B.
General Product Information
| Document Type | National standards |
|---|---|
| Standard Status | Active |
| Standard Code | GB/T 42457-2023 |
| CCS | Industrial automation instrumentation and control devices |
| ICS | Industrial automation systems |
| Implement Date | 2023-10-01 |