Valid

GB/T 42456-2023Security for industrial automation and control systems - Technical security requirements for IACS components (English PDF)

工业自动化和控制系统信息安全 IACS组件的安全技术要求

Preview PDF

This is a limited preview

Buy now to download the full PDF (70 pages)

Need quotation for your management?

Get a formal quotation for GB/T 42456-2023 in 30 minutes.

Issued by

SAMR; SAC

Level / Type

National · Recommended

Issue date

March 17, 2023

Implementation date

October 1, 2023

Scope

GB/T 42456-2023 is the English-translated version of 工业自动化和控制系统信息安全 IACS组件的安全技术要求.

GB/T 42456-2023 is the Chinese standard "Security for industrial automation and control systems - Technical security requirements for IACS components".

Its scope clause reads: This document provides detailed technical control system component requirements (CRs) associated with the seven foundational requirements (FRs) described in IEC TS 62443-1-1 including defining the requirements for control system capability security levels and their components, SL-C (component).

As defined in IEC TS 62443-1-1 there are a total of seven foundational requirements (FRs). a) identification and authentication control (IAC), b) use control (UC), c) system integrity (SI), d) data confidentiality (DC), e) restricted data flow (RDF), f) timely response to events (TRE), and g) resource availability (RA).

These seven FRs are the foundation for defining control system security capability levels. Defining security capability levels for the control system component is the goal and objective of this document as opposed to SL-T or achieved SLs (SL-A), which are out of scope.

NOTE 1.Refer to IEC 62443-2-1 for an equivalent set of non-technical, program-related, capability requirements necessary for fully achieving a SL-T(control system).

NOTE 2.The trademarks and trade names mentioned in this document are given for the convenience of users of this document. This information does not constitute an endorsement by IEC of the products named.

Found what you need?

Document preview — GB/T 42456-2023

National Standard of the People's Republic of China

ICS: 25.040
Classification: N 10

Issued by: State Administration for Market Regulation; Standardization Administration of the PRC

Foreword6
Introduction8
1 Scope12
2 Normative references12
3 Terms, definitions, abbreviated terms, acronyms, and conventions13
3.1 Terms and definitions13
3.2 Abbreviations21
3.3 Conventions24
4 Common component security constraints26
4.1 Overview26
4.2 CCSC 1.Support of essential functions26
4.3 CCSC 2.Compensating countermeasures26
4.4 CCSC 3.Least privilege26
4.5 CCSC 4.Software development process26
5 FR 1 - Identification and authentication control27
5.1 Purpose and SL-C (IAC) descriptions27
5.2 Rationale27
5.3 CR 1.1 - Human user identification and authentication27
5.4.1 Requirement29
5.5 CR 1.3 - Account management30
5.6 CR 1.4 - Identifier management31
5.7 CR 1.5 - Authenticator management32
5.8 CR 1.6 - Wireless access management34
5.9 CR 1.7 - Strength of password-based authentication34
5.10 CR 1.8 - Public key infrastructure certificates35
5.11 CR 1.9 - Strength of public key-based authentication35
5.12 CR 1.10 - Authenticator feedback37
5.13 CR 1.11 - Unsuccessful login attempts38
5.14 CR 1.12 - System use notification39
5.15 CR 1.13 - Access via untrusted networks40
5.16 CR 1.14 - Strength of symmetric key-based authentication40
6 FR 2 - Use control41
6.1 Purpose and SL-C (UC) descriptions41
6.2 Rationale42
6.3 CR 2.1 - Authorization enforcement42
6.4 CR 2.2 - Wireless use control44
6.5 CR 2.3 - Use control for portable and mobile devices45
6.6 CR 2.4 - Mobile code45
6.7 CR 2.5 - Session lock45
6.8 CR 2.6 - Remote session termination46
6.9 CR 2.7 - Concurrent session control47
6.10 CR 2.8 - Auditable events47
6.11 CR 2.9 - Audit storage capacity48

1 Scope

This document provides detailed technical control system component requirements (CRs) associated with the seven foundational requirements (FRs) described in IEC TS 62443-1-1 including defining the requirements for control system capability security levels and their components, SL-C (component).

As defined in IEC TS 62443-1-1 there are a total of seven foundational requirements (FRs).

a) identification and authentication control (IAC), b) use control (UC), c) system integrity (SI), d) data confidentiality (DC), e) restricted data flow (RDF), f) timely response to events (TRE), and g) resource availability (RA).

NOTE 1.Refer to IEC 62443-2-1 for an equivalent set of non-technical, program-related, capability requirements necessary for fully achieving a SL-T(control system).

2 Normative references

The following referenced documents are indispensable for the application of this

GB/T 42457-2023 | GB/T 41295.4-2022 | GB/T 41571-2022 | GB/T 11605-2026 | […]

......
This preview omits tables, figures, formulas and parts of the technical clauses. The complete document — 70 pages — is available in the English PDF.

Referenced standards

Cited by

How to Download GB/T 42456-2023

1
Add to cart
Click "Download PDF" on this page and choose "Buy this standard". You can add more standards before checkout.
2
Checkout
Enter your email and billing details. Payment is processed securely by Stripe (cards or bank transfer). Prefer bank details? Request a quotation (min. order $300).
3
Instant delivery (0–9 sec)
Delivery is automatic: within seconds of payment you'll receive an email with a secure download link. The link stays valid for 72 hours.
4
Invoice included
A tax invoice is attached to the confirmation email. Need a custom invoice? Contact us.