GB/T 33009.3-2016Industrial automation and control system security—Distributed control system(DCS)—Part 3: Assessment guidelines (English PDF)
工业自动化和控制系统网络安全 集散控制系统（DCS） 第3部分：评估指南
This is a limited preview
Buy now to download the full PDF (30 pages)
Need quotation for your management?
Get a formal quotation for GB/T 33009.3-2016 in 30 minutes.
Issued by
SAMR; SAC
Level / Type
National · Recommended
Issue date
October 13, 2016
Implementation date
May 1, 2017
Scope
GB/T 33009.3-2016 is the English-translated version of 工业自动化和控制系统网络安全 集散控制系统（DCS） 第3部分：评估指南.
GB/T 33009.3-2016 is the Chinese standard "Industrial automation and control system security—Distributed control system(DCS)—Part 3: Assessment guidelines".
Its scope clause reads: GB/T 33009 provisions of this part of the distributed control system security risk assessment level, the assessment of the object and the implementation process to And safety effectiveness test.
This section applies to power, petroleum, chemical, water conservancy, metallurgy, building materials and other fields for DCS system security risk assessment live It also applies to system maintenance activities that guide DCS users in improving and enhancing their DCS security capabilities in their production systems. Its clauses include terms, definitions, abbreviations.
Found what you need?
Document preview — GB/T 33009.3-2016
National Standard of the People's Republic of China
- ICS
- 25.040
- Classification
- N 10
Issued by: State Administration for Market Regulation; Standardization Administration of the PRC
Contents
- Foreword
- 1 Scope
- 2 Normative references
- 3 Terms, definitions, abbreviations
- 3.1 Terms and definitions
- 3.2 Abbreviations
- 4 DCS Security Risk Assessment Overview
- 4.1 DCS System Overview
- 4.2 DCS security risk assessment process framework and process
- 4.3 Evaluation Results
- 5 Assessment Preparation
- 5.1 Overview
- 5.2 Determine the target of DCS assessment
- 5.3 to determine the scope of assessment
- 5.4 Formation of evaluation team
- 5.5 System Research
- 5.6 to determine the basis for assessment and method
- 5.7 Develop Evaluation Program
- 5.8 Get Support
- 6 DCS safety factor identification
- 6.1 DCS Asset Identification
- 6.2 DCS Vulnerability
- 6.3 threat identification
- 6.4 Process Feature Identification
- 7 DCS Risk Analysis
- 7.1 Risk Calculation Principle
- 7.2 Risk Management Plan
- 8 Document Security Risk Assessment Document
- 8.1 Assessment Documentation Requirements
- 8.2 Evaluation Documents
- Appendix A (Normative) Security risk assessment of each stage of DCS life cycle
- Appendix B (informative) risk testing tools and distributed control system (DCS) common test content
- Appendix C (Normative) Calculation of risk
- References
1 Scope
GB/T 33009 provisions of this part of the distributed control system security risk assessment level, the assessment of the object and the implementation process to
And safety effectiveness test.
This section applies to power, petroleum, chemical, water conservancy, metallurgy, building materials and other fields for DCS system security risk assessment live
It also applies to system maintenance activities that guide DCS users in improving and enhancing their DCS security capabilities in their production systems.
2 Normative references
The following documents for the application of this document is essential. For dated references, only the dated version applies to this article
Pieces. For undated references, the latest edition (including all amendments) applies to this document.
Information security technology Information security risk assessment code
Information security for industrial control systems - Part 1. Evaluation criteria
3 Terms, definitions, abbreviations
3.1 Terms and definitions
GB/T 20984-2007 and GB/T 30976.1-2014 define the following terms and definitions apply to this document. For the sake of it
In use, the following repetition lists some of the terms and definitions in GB/T 20984-2007 and GB/T 30976.1-2014.
3.1.1 Acceptance
A method used to end the project implementation in the risk assessment activities is mainly organized by the organization under assessment and carries out item-by-item inspection on the assessment activities
The test, to achieve the assessment of the target to accept the standard.
[GB/T 30976.1-2014, Definition 3.1.4]
3.1.2 Access control
Protect system resources against unauthorized access; the process of using system resources is based on security policies and based on this policy only
Authorized entities (users, programs, processes, or other systems) are allowed.
[IEC 62443-1-1, definition 3.2.2]
3.1.3 Availability
Data or resources can be authorized entities to access and use features.
[GB/T 20984-2007, Definition 3.3] […]
......
This preview omits tables, figures, formulas and parts of the technical clauses. The complete document — 30 pages — is available in the English PDF.
Similar standards
How to Download GB/T 33009.3-2016
- 1
Add to cart
Click "Download PDF" on this page and choose "Buy this standard". You can add more standards before checkout.
- 2
Checkout
Enter your email and billing details. Payment is processed securely by Stripe (cards or bank transfer). Prefer bank details? Request a quotation (min. order $300).
- 3
Instant delivery (0–9 sec)
Delivery is automatic: within seconds of payment you'll receive an email with a secure download link. The link stays valid for 72 hours.
- 4
Invoice included
A tax invoice is attached to the confirmation email. Need a custom invoice? Contact us.
Related Standards
GB/T 33009.1-2016 — Industrial automation and control system security—Distributed control system(DCS)—Part 1: Protection requirements
GB/T 33009.2-2016 — Industrial automation and control system security—Distributed control system(DCS)—Part 2: Management requirements
GB/T 33009.4-2016 — Industrial automation and control system security—Distributed control system (DCS)—Part 4: Risk and vulnerability detection requirements
Secure payment via Stripe
Payments accepted
GB/T 33009.3-2016
$535.00