GB/T 42457-2023 Active National standards

GB/T 42457-2023 Security for industrial automation and control systems—Secure product development lifecycle requirements

Publish Date: 2023-03-17 Implement Date: 2023-10-01 For services related to genuine standard inquiry, procurement, translation, and other related services in China, please Contact Us

Price: $ 140

Download

Basic Information

Standard Code: GB/T 42457-2023

Standard Type: National standards

Standard Status: Active

is_force_gb: no

CCS Name: Industrial automation instrumentation and control devices

ICS Name: Industrial automation systems

Publish Date: 2023-03-17

Implement Date: 2023-10-01

Pages: 46 pages

Scope

This document specifies the process requirements for the development of information security for industrial automation and control system products. It defines a security development lifecycle (SDL) for developing and maintaining secure products. This lifecycle includes security requirement definition, security design, security implementation (including coding guidelines), verification and validation, defect management, patch management, and product retirement. These requirements can be applied to new or existing processes for developing, maintaining, and phasing out new or existing product hardware, software, or firmware. These requirements apply to product developers and maintainers, but not to product integrators or users. A summary list of the requirements of this document is provided in Appendix B.