EN IEC 62443-4-1:2018

FOREWORD
INTRODUCTION
1 Scope
2 Normative references
3 Terms, definitions, abbreviated terms, acronyms
   and conventions
4 General principles
5 Practice 1 - Security management
6 Practice 2 - Specification of security requirements
7 Practice 3 - Secure by design
8 Practice 4 - Secure implementation
10 Practice 6 - Management of security-related issues
11 Practice 7 - Security update management
12 Practice 8 - Security guidelines
Annex A (informative) - Possible metrics
Annex B (informative) - Table of requirements
Bibliography
Annex ZA (normative) - Normative references to
         international publications with their
         corresponding European publications

IEC 62443-4:2018(E) specifies the process requirements for the secure development of products used in industrial automation and control systems. This specification is part of a series of standards that addresses the issue of security for industrial automation and control systems (IACS). IEC 62443-4 defines secure development life-cycle (SDL) requirements related to cyber security for products intended for use in the industrial automation and control systems environment and provides guidance on how to meet the requirements described for each element. The life-cycle description includes security requirements definition, secure design, secure implementation (including coding guidelines), verification and validation, defect management, patch management and product end-of-life. These requirements can be applied to new or existing processes for developing, maintaining and retiring hardware, software or firmware.Note that these requirements only apply to the developer and maintainer of the product, and are not applicable to the integrator or the user of the product. A summary list of the requirements is provided in Annex B.