This standard provides the cybersecurity requirements for the Industrial Automation and Control Systems (IACS) as embedded components, network components, host components and applications. This standard aims to specify the security capabilities that must have a component to be integrated into a system environment with a given Security Level (SL).
The National Cryptology Centre (CCN in Spanish) has included two new products evaluated by jtsec in its CPSTIC Security Products Catalogue. In constant collaboration with our international clients, we are pleased to communicate that the following products are already part of the CPSTIC Security Products Catalogue.
One way to make an ICT product or system stand out from the competitors is to prove its ability to handle information in a cyber-secure manner, and for that, the most recommendable way is that a third party certifies the product according to a cybersecurity standard.
This first part of the UL 2900 standard is applied to networked products that must be evaluated against threats, malware and security breaches. This standard defines all the general requirements to be met from a software point of view, therefore it does not contain how to verify the functional specification of the product nor the hardware requirements.
SPRI, the Basque Agency for Business Development, is implementing non-refundable economic aids in the field of Industrial Cybersecurity. Thus, the Basque Country intends to verify and increase the cybersecurity of its industrial sector, one of the bases of the economy of the area.