For multi-user versions of EN standards please contact us: info@en-standard.eu

 

PRICES include / exclude VAT
Homepage>BS Standards>25 MANUFACTURING ENGINEERING>25.040 Industrial automation systems>25.040.40 Industrial process measurement and control>PD IEC/TR 62443-2-3:2015 Security for industrial automation and control systems Patch management in the IACS environment
Sponsored link
immediate downloadReleased: 2015-07-31
PD IEC/TR 62443-2-3:2015 Security for industrial automation and control systems Patch management in the IACS environment

PD IEC/TR 62443-2-3:2015

Security for industrial automation and control systems Patch management in the IACS environment

Format
Availability
Price and currency
English Secure PDF
Immediate download
336.47 USD
English Hardcopy
In stock
336.47 USD
Standard number:PD IEC/TR 62443-2-3:2015
Pages:66
Released:2015-07-31
ISBN:978 0 580 83544 5
Status:Standard
DESCRIPTION

PD IEC/TR 62443-2-3:2015


This standard PD IEC/TR 62443-2-3:2015 Security for industrial automation and control systems is classified in these ICS categories:
  • 35.040.40 Coding of audio, video, multimedia and hypermedia information
  • 35.100.05 Multilayer applications
  • 35.030 IT Security
  • 35.100.01 Open systems interconnection in general
  • 25.040.40 Industrial process measurement and control

This part of This part of IEC 62443 , which is a Technical Report, describes requirements for asset owners and industrial automation and control system (IACS) product suppliers that have established and are now maintaining an IACS patch management program.

This Technical Report recommends a defined format for the distribution of information about security patches from asset owners to IACS product suppliers, a definition of some of the activities associated with the development of the patch information by IACS product suppliers and deployment and installation of the patches by asset owners. The exchange format and activities are defined for use in security related patches; however, it may also be applicable for non-security related patches or updates.

The Technical Report does not differentiate between patches made available for the operating systems (OSs), applications or devices. It does not differentiate between the product suppliers that supply the infrastructure components or the IACS applications; it provides guidance for all patches applicable to the IACS. Additionally, the type of patch can be for the resolution of bugs, reliability issues, operability issues or security vulnerabilities.

NOTE 1

This Technical Report does not provide guidance on the ethics and approaches for the discovery and disclosure of security vulnerabilities affecting IACS. This is a general issue outside the scope of this report.

NOTE 2

This Technical Report does not provide guidance on the mitigation of vulnerabilities in the period between when the vulnerability is discovered and the date that the patch resolving the vulnerability is created. For guidance on multiple countermeasures to mitigate security risks as part of an IACS security management system (IACS-SMS), refer to, Annexes B.4.5, B.4.6 and B.8.5 in this Technical Report and other documents in the IEC 62443 series.


Customers who bought this item also bought
English Secure PDF
Immediate download
362.35 USD
English Hardcopy
In stock
362.35 USD
English Secure PDF
Immediate download
362.35 USD
English Hardcopy
In stock
362.35 USD
English Secure PDF
Immediate download
362.35 USD
English Hardcopy
In stock
362.35 USD
English Secure PDF
Immediate download
282.12 USD
English Hardcopy
In stock
282.12 USD