GB/T 41260-2022Security requirements for digital factory (English PDF)
数字化车间信息安全要求
This is a limited preview
Buy now to download the full PDF (28 pages)
Need quotation for your management?
Get a formal quotation for GB/T 41260-2022 in 30 minutes.
Issued by
SAMR; SAC
Level / Type
National · Recommended
Issue date
March 9, 2022
Implementation date
October 1, 2022
Scope
GB/T 41260-2022 is the English-translated version of 数字化车间信息安全要求.
GB/T 41260-2022 sets the information security requirements of a digital workshop. It gives the general rules, the management requirements - the organisation, the responsibilities, the rules and the training - and the technical requirements, that is the protection of the networks, the systems, the devices and the data of the workshop.
It applies to the information security activities of engineering design, equipment production, system integration, operation and maintenance, and security assessment of a digital workshop.
Manufacturers, system integrators and security assessors use it. Issued on 9 March 2022, it has applied since 1 October 2022.
Found what you need?
Document preview — GB/T 41260-2022
National Standard of the People's Republic of China
- ICS
- 25.040
- Classification
- N 10
Issued by: State Administration for Market Regulation; Standardization Administration of the PRC
Contents
- Preface
- Introduction
- 1 Scope
- 2 Normative references
- 3 Terms and Definitions, Abbreviations
- 3.1 Terms and Definitions
- 3.2 Abbreviations
- 4 General Principles of Information Security in Digital Workshop
- 4.1 Scope of Digital Workshop Information Security
- 4.2 Basic requirements for digital workshop information security
- 4.3 Digital Workshop Information Security Analysis Process
- 5 Digital workshop information security management requirements
- 5.1 Overview
- 5.2 Information Security Management System
- 5.3 Information Security Management Positions and Responsibilities
- 5.4 People Management
- 5.5 Risk Management
- 5.6 Physical Access Control Management
- 5.7 Operation and maintenance security management
- 5.8 Monitoring and reviewing the effectiveness of information security management
- 5.9 Maintain and improve
- 6 Digital workshop information security technical requirements
- 6.1 Overview
- 6.2 Zoning and Boundary Protection
- 6.3 Identification and Authentication
- 6.4 Using the controls
- 6.5 Resource Control
- 6.6 Data Security
- 6.7 Security Audit
- Appendix A (Informative) Common Threat Sources for Digital Workshop Information Security
- Appendix B (Informative) Example of Information Security of Digital Workshop in Typical Machinery Manufacturing Industry
- B.1 Overview
- B.2 Determining the Objects and Objectives of Protection
- B.3 Risk Analysis and Handling
- B.4 Security protection requirements and security strategies
- B.5 Security Validation and Evaluation
- B.6 Operation and Maintenance
- Appendix C (normative) Digital Workshop Information Security Enhancement Requirements
- C.1 Overview
- C.2 Zoning and Boundary Protection
- C.3 Identification and Authentication
- C.4 Using Control
- C.5 Resource Control
- C.6 Data Security
- C.7 Security Audit
- Reference
Foreword
This document is in accordance with the provisions of GB/T 1.1-2020 "Guidelines for Standardization Work Part 1: Structure and Drafting Rules of Standardization Documents" drafted.
Introduction
Compared with traditional production workshops, digital workshops have the characteristics of digitization, networking, and intelligence, and interconnection and interoperability have become digital workshops.
Basic features of construction. The boundary of the production workshop is expanded, the threat of traditional information security will penetrate into the digital workshop, and the digital At the beginning of the design of various equipment and systems in the workshop, it was mainly for usability rather than security, and the information security protection capability was generally low; digitalization The systematic nature of the workshop also leads to a greater impact on information security, and a local impact may lead to the shutdown of the entire workshop; and At the same time, the application of the Internet of Things and emerging network and communication technologies will also directly introduce external threats to the production site. The construction of information security should fully consider the factors.
This document takes the digital workshop as the object, fully considers the characteristics of the digital workshop, and proposes information security from the aspects of management and technology. Require. Digital workshop information security requirements
1 Scope
This document specifies general rules, management requirements and technical requirements for digital workshop information security.
This document is applicable to information security in engineering design, equipment production, system integration, production operation and maintenance, and security assessment for digital workshops Activity.
2 Normative references
The contents of the following documents constitute essential provisions of this document through normative references in the text. Among them, dated citations documents, only the version corresponding to that date applies to this document; for undated references, the latest edition (including all amendments) applies to this document.
GB/T 37413-2019 Digital Workshop Terms and Definitions
IEC 62443-1-1:2009 Industrial Communication Network Network and System Security Part 1-1.Terminology, Concepts and Models (Industrial els)
3 Terms and Definitions, Abbreviations
3.1 Terms and Definitions
The terms and definitions defined in GB/T 37413-2019 and IEC 62443-1-1:2009 and the following terms and definitions apply to this document.
3.1.1 digital workshop digitalfactory; digitalworkshop
Based on the technology and equipment required by the production object, using information technology, automation, measurement and control technology, etc. as means to connect the workshop with data Different units are the implementation units for planning, managing, diagnosing and optimizing the production operation process.
Note: In this document, the digital workshop only includes the production planning, production process, and production execution stages, excluding the stages of product design, service and support. [Source: GB/T 37413-2019, 2.1]
3.1.2 Asset
A physical or logical object owned or maintained by a digital workshop that has potential or actual value to the digital workshop.
NOTE: In the case of industrial automation and control systems, the physical asset with the greatest directly measurable value may be the controlled equipment. [Source: IEC 62443-1-1:2009, 3.2.6, with modifications]
3.1.3 Production system
A collection of hardware, software, and people required to complete digital shop floor production tasks.
Note: Digital workshop production systems include but are not limited to.
a) Programmable Logic Controller (PLC), Intelligent Electronic Equipment (IED), Distributed Control System (DCS), Emergency Shutdown System (ESD), Safety Instrumented System system (SIS), supervisory control and data acquisition (SCADA) system, motion control (MC) system, numerical control system (CNC), flexible manufacturing system (FMS) etc. system.
......
This preview omits tables, figures, formulas and parts of the technical clauses. The complete document — 28 pages — is available in the English PDF.
Referenced standards
Similar standards
How to Download GB/T 41260-2022
- 1
Add to cart
Click "Download PDF" on this page and choose "Buy this standard". You can add more standards before checkout.
- 2
Checkout
Enter your email and billing details. Payment is processed securely by Stripe (cards or bank transfer). Prefer bank details? Request a quotation (min. order $300).
- 3
Instant delivery (0–9 sec)
Delivery is automatic: within seconds of payment you'll receive an email with a secure download link. The link stays valid for 72 hours.
- 4
Invoice included
A tax invoice is attached to the confirmation email. Need a custom invoice? Contact us.
Related Standards
GB/T 37413-2019 — Digital factory—Terms and definitions
GB/T 10003-2026 — Biaxially oriented polypropylene (BOPP) film
GB/T 10004-2026 — Plastic/Plastic laminated films and pouches for packaging
Secure payment via Stripe
Payments accepted
GB/T 41260-2022
$480.00