SIST EN IEC 62443-3-3:2019/AC:2020
(Corrigendum)Industrial communication networks - Network and system security - Part 3-3: System security requirements and security levels (IEC 62443-3-3:2013/COR1:2014)
Industrial communication networks - Network and system security - Part 3-3: System security requirements and security levels (IEC 62443-3-3:2013/COR1:2014)
This part of the IEC 62443 series provides detailed technical control system requirements (SRs) associated with the seven foundational requirements (FRs) described in IEC 62443‑1‑1 including defining the requirements for control system capability security levels, SL-C(control system). These requirements would be used by various members of the industrial automation and control system (IACS) community along with the defined zones and conduits for the system under consideration (SuC) while developing the appropriate control system target SL, SL-T(control system), for a specific asset.
As defined in IEC 62443‑1‑1 there are a total of seven FRs:
a) Identification and authentication control (IAC),
b) Use control (UC),
c) System integrity (SI),
d) Data confidentiality (DC),
e) Restricted data flow (RDF),
f) Timely response to events (TRE), and
g) Resource availability (RA).
These seven requirements are the foundation for control system capability SLs, SL-C (control system). Defining security capability at the control system level is the goal and objective of this standard as opposed to target SLs, SL-T, or achieved SLs, SL-A, which are out of scope.
See IEC 62443‑2‑1 for an equivalent set of non-technical, program-related, capability SRs necessary for fully achieving a control system target SL.
Industrielle Kommunikationsnetze - IT-Sicherheit für Netze und Systeme - Teil 3-3: Systemanforderungen zur IT-Sicherheit und Security-Level (IEC 62443-3-3:2013/COR1:2014)
Réseaux industriels de communication - Sécurité dans les réseaux et les systèmes - Partie-3: Exigences relatives à la sécurité dans les systèmes et niveaux de sécurité (IEC 62443-3-3:2013/COR1:2014)
Industrijska komunikacijska omrežja - Zaščita omrežja in sistema - 3-3. del: Zahteve za zaščito in nivoje varnosti sistemov (IEC 62443-3-3:2013/COR1:2014)
Ta del skupine standardov IEC 62443 podaja podrobne tehnične zahteve za nadzorne sisteme (SR), ki so povezane s sedmimi temeljnimi zahtevami (FR), opisanimi v standardu IEC 62443 1 1, vključno z določanjem zahtev za nivoje varnosti zmogljivosti nadzornega sistema, SL-C (nadzorni sistem). Te zahteve bodo uporabljali različni člani skupnosti industrijske avtomatizacije in nadzornih sistemov (IACS) poleg opredeljenih con in vodov za obravnavani sistem (SuC) pri razvijanju ustreznih ciljnih nivojev varnosti nadzornega sistema, SL-T (nadzorni sistem), za določeno dobrino.
Kot je opredeljeno v standardu IEC 62443 1 1, obstaja sedem temeljnih zahtev:
a) nadzor identifikacije in preverjanja pristnosti (IAC),
b) nadzor uporabe (UC),
c) celovitost sistema (SI),
d) zaupnost podatkov (DC),
e) omejen pretok podatkov (RDF),
f) pravočasen odziv na dogodke (TRE) in
g) razpoložljivost virov (RA).
Teh sedem zahtev so temelj za nivoje varnosti zmogljivosti nadzornega sistema, SL-C (nadzorni sistem). Opredelitev zmogljivosti zaščite na ravni nadzornega sistema je cilj tega standarda v nasprotju s ciljnimi nivoji varnosti, SL-T, ali doseženimi nivoji varnosti, SL-A, ki niso zajeti.
Glej standard IEC 62443 2 1 za enakovreden nabor netehničnih, s programom povezanih zahtev za sistem, ki so potrebne za v celoti dosežene ciljne nivoje varnosti nadzornega sistema.
General Information
Relations
Standards Content (Sample)
SLOVENSKI STANDARD
01-januar-2020
Industrijska komunikacijska omrežja - Zaščita omrežja in sistema - 3-3. del:
Zahteve za zaščito in nivoje varnosti sistemov (IEC 62443-3-3:2013/COR1:2014)
Industrial communication networks - Network and system security - Part 3-3: System
security requirements and security levels (IEC 62443-3-3:2013/COR1:2014)
Industrielle Kommunikationsnetze - IT-Sicherheit für Netze und Systeme - Teil 3-3:
Systemanforderungen zur IT-Sicherheit und Security-Level (IEC 62443-3-
3:2013/COR1:2014)
Réseaux industriels de communication - Sécurité dans les réseaux et les systèmes -
Partie-3: Exigences relatives à la sécurité dans les systèmes et niveaux de sécurité (IEC
62443-3-3:2013/COR1:2014)
Ta slovenski standard je istoveten z: EN IEC 62443-3-3:2019/AC:2019-10
ICS:
25.040.01 Sistemi za avtomatizacijo v Industrial automation
industriji na splošno systems in general
35.030 Informacijska varnost IT Security
2003-01.Slovenski inštitut za standardizacijo. Razmnoževanje celote ali delov tega standarda ni dovoljeno.
EUROPEAN STANDARD EN IEC 62443-3-
3:2019/AC:2019-10
NORME EUROPÉENNE
EUROPÄISCHE NORM
October 2019
ICS 25.040.40; 35.110
English Version
Industrial communication networks - Network and system
security - Part 3-3: System security requirements and security
levels
(IEC 62443-3-3:2013/COR1:2014)
Réseaux industriels de communication - Sécurité dans les Industrielle Kommunikationsnetze - IT-Sicherheit für Netze
réseaux et les systèmes - Partie-3: Exige
...
SLOVENSKI STANDARD
01-januar-2020
Industrijska komunikacijska omrežja - Zaščita omrežja in sistema - 3-3. del:
Zahteve za zaščito in nivoje varnosti sistemov (IEC 62443-3-3:2013/COR1:2014)
Industrial communication networks - Network and system security - Part 3-3: System
security requirements and security levels (IEC 62443-3-3:2013/COR1:2014)
Industrielle Kommunikationsnetze - IT-Sicherheit für Netze und Systeme - Teil 3-3:
Systemanforderungen zur IT-Sicherheit und Security-Level (IEC 62443-3-
3:2013/COR1:2014)
Réseaux industriels de communication - Sécurité dans les réseaux et les systèmes -
Partie-3: Exigences relatives à la sécurité dans les systèmes et niveaux de sécurité (IEC
62443-3-3:2013/COR1:2014)
Ta slovenski standard je istoveten z: EN IEC 62443-3-3:2019/AC:2019-10
ICS:
25.040.01 Sistemi za avtomatizacijo v Industrial automation
industriji na splošno systems in general
35.110 Omreževanje Networking
2003-01.Slovenski inštitut za standardizacijo. Razmnoževanje celote ali delov tega standarda ni dovoljeno.
EUROPEAN STANDARD EN IEC 62443-3-
3:2019/AC:2019-10
NORME EUROPÉENNE
EUROPÄISCHE NORM
October 2019
ICS 25.040.40; 35.110
English Version
Industrial communication networks - Network and system
security - Part 3-3: System security requirements and security
levels
(IEC 62443-3-3:2013/COR1:2014)
Réseaux industriels de communication - Sécurité dans les Industrielle Kommunikationsnetze - IT-Sicherheit für Netze
réseaux et les systèmes - Partie-3: Exigences r
...
Frequently Asked Questions
SIST EN IEC 62443-3-3:2019/AC:2020 is a corrigendum published by the Slovenian Institute for Standardization (SIST). Its full title is "Industrial communication networks - Network and system security - Part 3-3: System security requirements and security levels (IEC 62443-3-3:2013/COR1:2014)". This standard covers: This part of the IEC 62443 series provides detailed technical control system requirements (SRs) associated with the seven foundational requirements (FRs) described in IEC 62443‑1‑1 including defining the requirements for control system capability security levels, SL-C(control system). These requirements would be used by various members of the industrial automation and control system (IACS) community along with the defined zones and conduits for the system under consideration (SuC) while developing the appropriate control system target SL, SL-T(control system), for a specific asset. As defined in IEC 62443‑1‑1 there are a total of seven FRs: a) Identification and authentication control (IAC), b) Use control (UC), c) System integrity (SI), d) Data confidentiality (DC), e) Restricted data flow (RDF), f) Timely response to events (TRE), and g) Resource availability (RA). These seven requirements are the foundation for control system capability SLs, SL-C (control system). Defining security capability at the control system level is the goal and objective of this standard as opposed to target SLs, SL-T, or achieved SLs, SL-A, which are out of scope. See IEC 62443‑2‑1 for an equivalent set of non-technical, program-related, capability SRs necessary for fully achieving a control system target SL.
This part of the IEC 62443 series provides detailed technical control system requirements (SRs) associated with the seven foundational requirements (FRs) described in IEC 62443‑1‑1 including defining the requirements for control system capability security levels, SL-C(control system). These requirements would be used by various members of the industrial automation and control system (IACS) community along with the defined zones and conduits for the system under consideration (SuC) while developing the appropriate control system target SL, SL-T(control system), for a specific asset. As defined in IEC 62443‑1‑1 there are a total of seven FRs: a) Identification and authentication control (IAC), b) Use control (UC), c) System integrity (SI), d) Data confidentiality (DC), e) Restricted data flow (RDF), f) Timely response to events (TRE), and g) Resource availability (RA). These seven requirements are the foundation for control system capability SLs, SL-C (control system). Defining security capability at the control system level is the goal and objective of this standard as opposed to target SLs, SL-T, or achieved SLs, SL-A, which are out of scope. See IEC 62443‑2‑1 for an equivalent set of non-technical, program-related, capability SRs necessary for fully achieving a control system target SL.
SIST EN IEC 62443-3-3:2019/AC:2020 is classified under the following ICS (International Classification for Standards) categories: 25.040.01 - Industrial automation systems in general; 35.030 - IT Security; 35.110 - Networking. The ICS classification helps identify the subject area and facilitates finding related standards.
SIST EN IEC 62443-3-3:2019/AC:2020 has the following relationships with other standards: It is inter standard links to SIST EN IEC 62443-3-3:2019. Understanding these relationships helps ensure you are using the most current and applicable version of the standard.
You can purchase SIST EN IEC 62443-3-3:2019/AC:2020 directly from iTeh Standards. The document is available in PDF format and is delivered instantly after payment. Add the standard to your cart and complete the secure checkout process. iTeh Standards is an authorized distributor of SIST standards.
Le document intitulé SIST EN IEC 62443-3-3:2019/AC:2020 se positionne comme une référence incontournable dans le domaine des réseaux de communication industriels et de la sécurité des systèmes. Ce standard fournit des spécifications détaillées des exigences de sécurité des systèmes (SRs) associées aux sept exigences fondamentales (FRs) énoncées dans l'IEC 62443‑1‑1, établissant ainsi un cadre robuste pour la sécurisation des systèmes de contrôle. L'un des principaux atouts de ce standard réside dans son approche systématique des niveaux de sécurité des capacités des systèmes de contrôle (SL-C). En définissant clairement les exigences nécessaires pour atteindre ces niveaux de sécurité, le document guide efficacement les membres de la communauté des systèmes d'automatisation industrielle et de contrôle (IACS) dans le développement de solutions adaptées. Cette orientation permet d'assurer non seulement la conformité aux exigences de sécurité mais aussi la mise en œuvre de mesures adaptées à chaque actif spécifique. Les sept exigences fondamentales, à savoir l'identification et le contrôle d’authentification (IAC), le contrôle d'utilisation (UC), l'intégrité du système (SI), la confidentialité des données (DC), le flux de données restreint (RDF), la réponse rapide aux événements (TRE), et la disponibilité des ressources (RA), constituent le socle sur lequel repose toute l'architecture sécuritaire proposée par le standard. Cette structuration permet une évaluation claire et précise des capacités de sécurité des systèmes de contrôle, en mettant l'accent sur leur milieu opérationnel. La pertinence du SIST EN IEC 62443-3-3:2019/AC:2020 est renforcée par sa capacité à s'adapter aux exigences évolutives du domaine de la sécurité des réseaux et systèmes industriels. En se concentrant sur le niveau de sécurité des capacités, il répond aux besoins croissants de protection dans un paysage technologique en constante évolution. En résumé, ce standard joue un rôle fondamental en établissant un cadre technique pour les exigences de sécurité, tout en plaidant pour une approche systématique de la sécurité dans l'automatisation industrielle. Sa mise en œuvre peut significativement améliorer la résilience des infrastructures critiques face aux menaces potentielles, rendant ainsi ce document essentiel pour quiconque s'intéresse à la sécurité dans le contexte des réseaux et systèmes industriels.
The SIST EN IEC 62443-3-3:2019/AC:2020 standard provides a comprehensive framework for establishing system security requirements (SRs) related to industrial communication networks, particularly focusing on the security aspects of control systems. Its scope is vital for various stakeholders in the industrial automation and control system (IACS) community as it delineates the technical control system requirements associated with the seven foundational requirements (FRs) outlined in IEC 62443-1-1. One of the standard's significant strengths lies in its structured approach to defining control system capability security levels (SL-C) and how these levels integrate with the fundamental security measures. Each of the seven FRs-Identification and authentication control (IAC), Use control (UC), System integrity (SI), Data confidentiality (DC), Restricted data flow (RDF), Timely response to events (TRE), and Resource availability (RA)-is thoroughly addressed, ensuring a robust foundational layer for security preparedness. This feature enables organizations to build resilience against potential security threats by providing clear, actionable requirements for their systems. The relevance of this standard cannot be overstated, as it aligns with contemporary security needs in the ever-evolving landscape of industrial control systems. It facilitates organizations in developing tailored control system target security levels (SL-T) that are aligned with their specific assets and operational context. The emphasis on defining security capability at the control system level sets it apart, positioning the standard as a critical document for organizations aiming to enhance their security posture. Moreover, by establishing a clear distinction between security capabilities to be achieved and target security levels, the standard allows companies to focus on the practical implementation of security measures. Consequently, this approach aids in mitigating risks effectively while fostering a culture of security within the organization. In summary, SIST EN IEC 62443-3-3:2019/AC:2020 offers an essential resource for stakeholders looking to enhance network and system security within industrial communication networks. With its well-defined requirements and emphasis on control system security capabilities, this standard is relevant for ensuring that organizations can navigate the complexities of security in the context of industrial automation effectively.
The standard SIST EN IEC 62443-3-3:2019/AC:2020 is a critical document within the IEC 62443 series, specifically targeting system security requirements and security levels for industrial communication networks and control systems. The scope of this standard provides comprehensive and detailed technical control system requirements, which are crucial for ensuring the security and integrity of industrial automation and control systems (IACS). One of the primary strengths of this standard is its clear delineation of seven foundational requirements (FRs) which are instrumental in developing effective security measures. These foundational requirements-Identification and authentication control (IAC), Use control (UC), System integrity (SI), Data confidentiality (DC), Restricted data flow (RDF), Timely response to events (TRE), and Resource availability (RA)-serve as a robust framework for establishing control system capability security levels (SL-C). This framework empowers stakeholders within the IACS community to assess and enhance their control system's security posture effectively. Moreover, the standard emphasizes the necessity of defining security capability at the control system level, which aligns well with modern industry needs for stringent security measures against emerging threats. It provides practical guidance for defining appropriate control system target security levels (SL-T) based on specific asset requirements, while clearly differentiating this process from achieved security levels (SL-A), which are not within its purview. This targeted approach ensures that organizations can focus their efforts on establishing a sound security foundation tailored to their operational contexts. The relevance of the SIST EN IEC 62443-3-3:2019/AC:2020 standard in today's risk landscape cannot be overstated. As industries become increasingly interconnected and reliant on digital technologies, the emphasis on secure communication networks and systems is paramount. This standard addresses pressing concerns related to cybersecurity in the industrial sector, providing essential guidelines that support organizations in their efforts to develop resilient and secure IACS. In summary, the SIST EN IEC 62443-3-3:2019/AC:2020 standard is a vital resource that equips the IACS community with the requisite knowledge and framework to escalate their security capabilities, adapt to evolving threats, and implement effective system security requirements. Its foundation of seven key requirements offers a structured approach to identifying and addressing areas needing security enhancement, thereby reinforcing the critical nature of the standard in safeguarding industrial communications and systems.
SIST EN IEC 62443-3-3:2019/AC:2020 표준은 산업 통신 네트워크 및 시스템 보안에 대한 중요한 프레임워크를 제공합니다. 이 표준의 주요 목적은 제어 시스템의 보안 요구 사항을 정의하고 이를 통해 각 산업 자동화 및 제어 시스템(IACS) 커뮤니티의 다양한 구성원들이 효과적으로 보안 수준을 결정할 수 있는 기반을 마련하는 것입니다. 특히 이 표준은 IEC 62443-1-1에 명시된 7가지 기초 요구 사항(FRs)에 기반하여 작동하며, 이는 다음과 같습니다: 식별 및 인증 제어(IAC), 사용 제어(UC), 시스템 무결성(SI), 데이터 기밀성(DC), 제한된 데이터 흐름(RDF), 사건에 대한 적시 대응(TRE), 자원 가용성(RA)입니다. 이러한 요구 사항들은 제어 시스템의 보안 능력을 평가하고 분류하는 데 있어 핵심적인 역할을 하며, 이를 통해 제어 시스템 보안 수준(SL-C)을 정의합니다. 이 문서는 보안 능력을 제어 시스템 수준에서 정의하는 것을 목표로 하며, 목표 보안 수준(SL-T)이나 도달된 보안 수준(SL-A)과는 구별되는 점이 강点입니다. 따라서 제어 시스템 보안의 필요성과 현업에서 활용 가능성이 꽤 높은 표준으로 평가됩니다. SIST EN IEC 62443-3-3는 제어 시스템의 목표 보안 수준을 설정할 때 필요한 자세한 기술적 제어 시스템 요구 사항(SRs)을 제공하여, 다양한 산업 분야에서의 활용을 염두에 두고 제정되었습니다. 이러한 측면에서 이 표준은 복잡한 산업 환경에서의 안전한 통신과 시스템 보호를 강화하는 데 필요하며, 전체 시스템의 보안 접근 방식을 구조화하는 데 기여합니다.
SIST EN IEC 62443-3-3:2019/AC:2020 표준은 산업 통신 네트워크와 시스템 보안에 대한 중요한 지침을 제공합니다. 이 문서는 IEC 62443 시리즈의 일환으로, 제어 시스템 요구 사항(SRs)을 정의하며, 이는 산업 자동화 및 제어 시스템(IACS) 커뮤니티의 다양한 구성원들이 활용할 수 있도록 설계되었습니다. 이 표준의 강점 중 하나는 제어 시스템의 보안 레벨(SL-C)을 정의하는 데 있어 기초가 되는 일곱 가지 기본 요구 사항(FRs)을 명확히 설정한다는 점입니다. 각각의 요구 사항은 식별 및 인증 제어(IAC), 사용 제어(UC), 시스템 무결성(SI), 데이터 기밀성(DC), 제한된 데이터 흐름(RDF), 사건에 대한 적시 대응(TRE), 자원 가용성(RA)으로 구성됩니다. 이러한 요구 사항은 제어 시스템의 보안 능력을 평가하고 강화하는 데 필수적입니다. 또한, 이 표준은 특정 자산에 대한 적절한 제어 시스템 목표 보안 수준(SL-T)을 개발하는 데 필요한 정의된 영역 및 경로를 포함하여 시스템 고려(SuC)에 대한 요구 사항을 제공합니다. 이를 통해 산업 시스템의 보안 개선 및 위험 관리를 체계적으로 수행할 수 있습니다. SIST EN IEC 62443-3-3:2019/AC:2020 표준은 제어 시스템의 보안 능력을 정의하는 것을 목표로 하며, 이는 산업 보안 분야의 전문가들 사이에서 높은 관련성을 지니고 있습니다. 결과적으로, 이 표준은 신뢰할 수 있는 보안 체계를 구축하고 유지하는 데 중요한 역할을 합니다.
SIST EN IEC 62443-3-3:2019/AC:2020は、産業通信ネットワークのネットワークおよびシステムの安全性に関する重要な標準であり、制御システムのセキュリティ要件とセキュリティレベルに特化した部分です。この標準は、IEC 62443シリーズの中で特に重要な役割を果たし、制御システムのセキュリティ能力を確立するための詳細な技術的コントロールシステム要件（SRs）を提供します。 本標準の範囲は、IEC 62443-1-1で定義された7つの基盤要件（FRs）に基づいており、制御システムの能力に関連するセキュリティレベル（SL-C）を明確に定義しています。この7つのFRsは、識別及び認証制御（IAC）、使用制御（UC）、システムの整合性（SI）、データの機密性（DC）、制限されたデータフロー（RDF）、イベントへのタイムリーな対応（TRE）、およびリソースの可用性（RA）から構成されており、それぞれが制御システムのセキュリティ能力の基礎となります。 本標準の強みは、制御システムのセキュリティ能力を体系的に評価し、特定の資産に対する適切な制御システムの目標セキュリティレベル（SL-T）を設定するための道筋を提供する点にあります。これにより、産業自動化および制御システム（IACS）コミュニティの多様なメンバーが、システム下のゾーンおよび導管を考慮しながら、自身のセキュリティニーズに合わせた対応を行うことが可能になります。 さらに、この標準は、制御システムレベルでのセキュリティ能力の定義に焦点を当てており、ターゲットセキュリティレベル（SL-T）や達成されたセキュリティレベル（SL-A）はその範囲外であるため、明確な目的を持っています。このように、SIST EN IEC 62443-3-3:2019/AC:2020は、産業界におけるネットワークおよびシステムセキュリティの向上に寄与するものであり、その関連性は極めて高いと言えます。
Die Norm SIST EN IEC 62443-3-3:2019/AC:2020 ist ein wesentlicher Bestandteil der IEC 62443-Serie und konzentriert sich auf die Sicherheitsanforderungen und -niveaus von industriellen Kommunikationsnetzwerken sowie von Netzwerk- und Softwaresystemen. Sie bietet eine detaillierte Beschreibung der technischen Sicherheitsanforderungen (SRs) für Steuerungssysteme in der Automatisierungs- und Steuerungssystem-Community (IACS). Ein herausragendes Merkmal dieser Norm ist ihr klar definierter Anwendungsbereich. Sie legt die Anforderungen für Sicherheitsniveaus (SL-C) von Steuerungssystemen fest, die aus den sieben grundlegenden Anforderungen (FRs) abgeleitet sind. Diese sieben FRs sind: Identifikation und Authentifizierungskontrolle (IAC), Verwendungskontrolle (UC), Systemintegrität (SI), Datensicherheit (DC), eingeschränkter Datenfluss (RDF), zeitgerechte Reaktion auf Ereignisse (TRE) und Ressourcenverfügbarkeit (RA). Diese Basisanforderungen sind entscheidend für die Festlegung der Sicherheitsfähigkeit auf der Ebene der Steuerungssysteme. Die Norm ist besonders relevant für die Entwicklung geeigneter Sicherheitsstrategien und Ziel-Sicherheitsniveaus (SL-T) für spezifische industrielle Anlagen. Durch die Definition der Sicherheitsanforderungen unterstützt die Norm die IACS-Community dabei, eine angemessene Sicherheitsarchitektur um die betrachteten Zonen und Leitungen (SuC) zu gestalten. So wird sichergestellt, dass Steuerungssysteme nicht nur gegen aktuelle Bedrohungen gewappnet sind, sondern auch zukünftigen Herausforderungen gewachsen sind. Ein großer Vorteil dieser Norm liegt in ihrer praxisnahen Herangehensweise an die Sicherheitsanforderungen, was sie zu einem unverzichtbaren Dokument für alle Stakeholder in der Automatisierungsindustrie macht. Die klare Struktur und die umfassende Abdeckung der Sicherheitsanforderungen ermöglichen es Organisationen, die Norm effektiv in ihre bestehenden Sicherheitsstrategien zu integrieren und thereby die Resilienz ihrer Systeme zu verbessern. Zusammenfassend bietet die SIST EN IEC 62443-3-3:2019/AC:2020 eine fundierte Grundlage für die Sicherheit von industriellen Kommunikationsnetzwerken. Ihre praxisorientierten Anforderungen und die Betonung der Sicherheitsniveaus machen sie zu einem unverzichtbaren Referenzdokument für Fachleute im Bereich der industriellen Automatisierung und Sicherheitstechnik.
SIST EN IEC 62443-3-3:2019/AC:2020は、産業通信ネットワークにおけるネットワークとシステムのセキュリティに関する重要な標準であり、特に制御システムのセキュリティ要件とセキュリティレベルに焦点を当てています。この標準は、制御システム能力のセキュリティレベル（SL-C）に関連する詳細な技術的制御システム要件（SR）を提供し、IEC 62443‑1‑1で説明されている7つの基礎的要件（FR）に基づいています。 この標準のスコープは、産業自動化および制御システム（IACS）コミュニティのさまざまなメンバーが、特定の資産に対して適切な制御システム目標セキュリティレベル（SL-T）を開発する際に必要なセキュリティ要件を定義することです。これにより、制御システムが直面するリスクを最小限に抑え、セキュリティの確保が図られます。 この標準が持つ強みは、セキュリティ能力を制御システムレベルで定義することに重点を置いている点です。これは、目標セキュリティレベル（SL-T）や達成されたセキュリティレベル（SL-A）とは異なり、セキュリティの基盤を確立するためのものであり、実務において非常に重要です。 定義された7つの基礎的要件は以下の通りです： a) 身元確認および認証制御（IAC）、 b) 使用制御（UC）、 c) システムの整合性（SI）、 d) データの機密性（DC）、 e) 制限されたデータの流れ（RDF）、 f) イベントへの迅速な対応（TRE）、および g) リソースの可用性（RA）。 これらの要件は、制御システム能力のセキュリティレベルを構築するための基盤となり、産業界におけるセキュリティの重要性が増す中で、その関連性は一層高まっています。SIST EN IEC 62443-3-3:2019/AC:2020は、今後のセキュリティ対策において不可欠なガイドラインを提供するものであり、その適用は、正当な制御システムの設計と運用に深く結びついています。
Questions, Comments and Discussion
Ask us and Technical Secretary will try to provide an answer. You can facilitate discussion about the standard in here.
Loading comments...