IEC 62443-4-1:2018

Title
Abstract

IEC 62443-4:2018 specifies the process requirements for the secure development of products used in industrial automation and control systems. This specification is part of a series of standards that addresses the issue of security for industrial automation and control systems (IACS). IEC 62443-4 defines secure development life-cycle (SDL) requirements related to cyber security for products intended for use in the industrial automation and control systems environment and provides guidance on how to meet the requirements described for each element. The life-cycle description includes security requirements definition, secure design, secure implementation (including coding guidelines), verification and validation, defect management, patch management and product end-of-life. These requirements can be applied to new or existing processes for developing, maintaining and retiring hardware, software or firmware.
Note that these requirements only apply to the developer and maintainer of the product, and are not applicable to the integrator or the user of the product. A summary list of the requirements is provided in Annex B.

Issue Date

2018-01-15

Category

CYBR

Included in IECEE System

2018-06-08

Purchase webstore
Test Report Form
Testing Equipment List
DISCLAIMER: National differences

The National differences and Group differences, National Deviations and Special National conditions (SNC), are based solely on information provided to the Secretariat by the IECEE Member Bodies and/or NCBs and other sources. The IEC/IECEE is not responsible for, nor will it take any position related to, the accuracy or validity of the information provided. To verify the current status of this type of information, we recommend contacting the Member Body (MB) or National Certification Body (NCB) of the relevant country.

Group Differences are applicable for CENELEC member countries: Austria, Belgium, Bulgaria, Croatia, Cyprus, the Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, the Netherlands, Norway, Poland, Portugal, Republic of North Macedonia, Romania, Serbia, Slovakia, Slovenia, Spain, Sweden, Switzerland, Turkey and the United Kingdom.

No information declared

Laboratory Name

City

Country

Responsible National Certification Body

Taoyuan City, Taiwan

Chinese Taipei

Arnhem

Netherlands

Shanghai 200436

China

182 00 Praha 8 – Troja

Czech Republic

Reichenwalde b. Berlin

Germany

Hørsholm 2970

Denmark

Milano

Italy

Menlo Park,

United States of America

Granada

Spain

NL - 7327 AC Apeldoorn

Netherlands

Fontenay-Aux-Roses

France

Shanghai

China

Paris

France

New Taipei City

Chinese Taipei

Madrid

Spain

Shanghai

China

Guangzhou

China

TW-404 Taichung

Chinese Taipei

Essen

Germany

Köln

Germany

Singapore 609937

Singapore

München

Germany

Northbrook, IL 60062

United States of America

Id

Name

City

Country

22917

Getafe

Spain

13360

Arnhem

Netherlands

13339

Praha 8 - Troja 171 02

Czech Republic

13348

Reichenwalde b. Berlin

Germany

21077

Broendby

Denmark

13351

Milano

Italy

13424

IL 60005

United States of America

13749

NL - 7327 AC Apeldoorn

Netherlands

13343

Fontenay-Aux-Roses

France

13641

Paris Cedex 15

France

13334

BRUSSELS 1070

Belgium

13342

Helsinki

Finland

13617

Essen

Germany

13354

Yokohama

Japan

13427

Singapore 609937

Singapore

13346

München

Germany

13340

Ballerup

Denmark

Id

Name

City

Country

13365

Singapore

Singapore

13843

Hamburg

Germany

13344

Offenbach / Main

Germany