GB/T 42456-2023 Security for industrial automation and control systems—Technical security requirements for IACS components

Scope

This document provides detailed technical control system component requirements (CR) related to the seven basic requirements (FR) described in IEC TS 62443-1-1, including the definition of the control system's capability safety level and its component SL-C (component).
According to IEC TS 62443-1-1, there are a total of seven FRs:
a) Identification and Authentication Control (IAC),
b) Use Control (UC),
c) System Integrity (SI),
d) Data Confidentiality (DC),
e) Restricted Data Flow (RDF),
f) Timely Response to Events (TRE),
g) Resource Availability (RA).
These seven requirements (FR) are the basis for defining the control system's safety capability level. The main objective of this document is to define the safety capability level of control system components, while SL (SL-T) or how to achieve SL (SL-A) are not within the scope of this document.
Note 1: To fully achieve the SL objectives of the control system, it is also necessary to refer to the series of non-technical, procedure-related CR capabilities specified in IEC 62443-2-1. Unless otherwise specified, "security" in this document refers to "information security".
Note 2: The trademarks and product names mentioned in this document are for the convenience of users. This information does not constitute IEC's endorsement of the products mentioned.

Development Information

Referenced Standards

Adopt standards

Related Standards