IEC 62443 Guideline for Mechanical and Plant Engineering - Rev. 2021 EN

PDF-Download
VDMA 2021
50 Seiten
49,- € -
VDMA-Mitglieder kostenfrei

In erster Linie ist das Ziel dieses Leitfadens, den Maschinen- und Anlagenbau sicherer – im Sinn der Security – zu machen. Dies meint sowohl die Betriebsprozesse des Maschinen- bzw. Anlagenbauers selbst als auch die Resilienz der Produkte – also Maschinen, Anlagen und deren Komponenten – gegen Cyber-Angriffe und andere IT-induzierte Schäden im Betrieb. Der Fokus liegt dabei auf der OT-Security (Operational Technology) und der Product-Security, nicht auf IT-Security im Sinn der Office-IT.

Contents
1. Introduction
1.1. Industrial Security
1.2. Special Considerations in Mechanical and Plant Engineering
1.3. Why Do We Need a Separate Guideline?
2. Security Standards
2.1. IEC 62443
2.1.1. General Concepts
2.1.2. Fundamental Concepts
2.2. Structure of Requirements in IEC 62443
2.2.1. Foundational Requirements
2.2.2. System Requirements and Requirement Enhancements
3. The Path Through IEC 62443
3.1. Activities
3.2. Scope
3.3. Establishing a Cyber-Security Management System (CSMS)
3.4. Definition of the Security Level
3.5. A Map of IEC 62443
3.5.1. Security Requirements for the Machine/Plant (IEC 62443-3-3)
3.5.2. Security Requirements for Operating Processes (IEC 62443-2-1 or IEC 62443-2-4)
3.5.3. Security Requirements for Service Providers (IEC 62443-2-4)
3.5.4. Security Requirements for Products (IEC 62443-4-x)
4. Model Machine
4.1. Implementation of IEC 62443-3-3
4.2. Phase 1: Zones
4.3. Phase 2: Communication
4.4. Phase 3: Authentication and Authorization
4.5. Phase 4: Response and Recovery
5. Summary and Outlook
5.1. Summary
5.2. Outlook
5.2.1. Security and Safety
5.2.2. Certification
5.2.3. Certificates/PKI Support
5.2.4. Using Secure Protocols
5.2.5. Further Developments of the Standard
5.2.6. Machine-as-a-Service and Usage-Related Services
Appendix A. Lists
A.1 List of Tables
A.2 List of Figure
Appendix B. Literature
B.1 IEC 62443
B.2 Other Documents
Appendix C. Security Infrastructure of the Operator
Appendix D. Requirements from IEC 62443-3-3
Appendix E. Structure of IEC 62443-2-4
Appendix F. Accredited Bodies (DAkkS) for IEC 62443