GB/T 42457-2023: Security for industrial automation and control systems - Secure product development lifecycle requirements

Delivery: 9 seconds. Download (and Email) true-PDF + Invoice.
Get Quotation: Click GB/T 42457-2023 (Self-service in 1-minute)
Newer / historical versions: GB/T 42457-2023

Preview True-PDF

Scope

This document specifies process requirements for the secure development of products used in
industrial automation and control systems. It defines a secure development lifecycle (SDL) for
the purpose of developing and maintaining secure products. This lifecycle includes security
requirements definition, secure design, secure implementation (including coding guidelines),
verification and validation, defect management, patch management and product end-of-life.
These requirements can be applied to new or existing processes for developing, maintaining
and retiring hardware, software or firmware for new or existing products. These requirements
apply to the developer and maintainer of the product, but not to the integrator or user of the
product. A summary list of the requirements in this document can be found in Appendix B.

Basic Data

Standard ID	GB/T 42457-2023 (GB/T42457-2023)
Description (Translated English)	Security for industrial automation and control systems - Secure product development lifecycle requirements
Sector / Industry	National Standard (Recommended)
Classification of Chinese Standard	N10
Classification of International Standard	25.040
Word Count Estimation	48,436
Date of Issue	2023-03-17
Date of Implementation	2023-10-01
Issuing agency(ies)	State Administration for Market Regulation, China National Standardization Administration