GB/T 43532-2023Cybersecurity controls for instrumentation and control systems of nuclear power plants (English PDF)

Foreword

This document complies with the provisions of GB/T 1.1-2020 "Standardization Work Guidelines Part 1: Structure and Drafting Rules of Standardization Documents" Drafting:

This document is modified to adopt IEC 63096:2020 "Nuclear power plant instrumentation, control and power system network security prevention and control":

Compared with IEC 63096:2020, this document has made the following structural adjustments:

---Chapter 4 "Abbreviations" has been added, and the content of 3:2 in IEC 63096:2020 has been adjusted to Chapter 4 of this document, with the corresponding chapter number postpone in turn;

---According to the GB/T 1.1 format requirements, 5:1:1, 5:1:2, 7:3:1, 9:3:1, 10:1:1, 10:1:2, 12:2:1, 12:3:1, 12:7:1, 14:1:1, 14:3:1, 16:1:2~16:1:7, 17:2:1, 19:1:1~19:1:5, 20:1:1 are adjusted to 6:1, 6:2,, 8:3, 10:3, 11:1, 11:2, 13:2, 13:3, 13:7, 15:1, 15:3, 17:2~17:7, 18:2, 20:1~20:5, 21, will 16:1:1:1~16:1:1:17 is adjusted to 17:1:1~17:1:7;

---Adjust 4:2:2~4:2:4 in IEC 63096:2020 to 5:2:1~5:2:3;

---Adjust the relevant instructions on safety control marks in 4:3:2 of IEC 63096:2020 to 5:3:3;

---Adjust 8:2:3 in IEC 63096:2020 to 9:1:5;

---Adjust the suspension section of 14:1:1:4 to 14:1:1:4:1, and the following bar numbers will be extended in sequence;

---Adjust the suspension section of 14:1:2 to 14:1:2:1, and the following bar numbers will be extended in sequence;

---Adjust the suspension section of 14:1:3 to 14:1:3:1, and the following bar numbers will be extended in sequence;

---Appendix A in the original IEC 63096:2020 is adjusted to Appendix C:

The technical differences between this document and IEC 63096:2020 and their reasons are as follows:

---According to the requirements of GB/T 1.1, the description of "Scope" in Chapter 1 has been changed (see Chapter 1):

---Replace ISO/IEC 27002:2013 with normatively quoted GB/T 22081-2016 (see 5.3:1~5:3:4, 5:4:2:1), to Adapt to my country's technical conditions and provide operability:

---Replace ISO/IEC 27033 (all parts) with normatively quoted GB/T 25068 (all parts) (see 12.2:6) to adapt my country's technical conditions provide operability:

---Replace ISO/IEC 27035 (all parts) with normatively quoted GB/T 20985 (all parts) [see 13.6:1u), 17:1:5e)], in order to adapt to my country's technical conditions and provide operability:

---In order to adapt to my country's technical conditions, this document has made some adjustments to the content of Chapter 3, including:

- Changed the terms and definitions of "instrumentation and control systems" (see 3.2), "cybersecurity incidents" (see 3.8), and "cybersecurity incidents" (see 3.9), "Electrical/Electronic/Programmable Electronic Items" (see 3.13), "RACI Model" (see 3.21), "Safety Prevention Area Domain" (see 3.22);

- Added terms and definitions "security policy" (see 3.24), "security management and control of instrumentation and control platform and instrumentation and control system body" (see 3.25);

- The terms and definitions "third-party software (see IEC 63096.20203:1:1)" and "business continuity (see IEC 63096.20203:1:1)" are deleted:

20203:1:2)" "Application software (see IEC 63096.20203:1:4)" "Computer-based items (see IEC 63096:

20203:1:6)" "Existing instrumentation and control systems (see IEC 63096.20203:1:19)" "Mobile equipment (see IEC 63096:2020 3:1:21)" "Entity control (see IEC 63096.20203:1:24)" "Product (see IEC 63096.20203:1:25)" "Programmable Process logic items (see IEC 63096.20203:1:27)" "Serious safety events (see IEC 63096.20203:1:34)" "Source Code (see IEC 63096.20203:1:35)" "Applicability Statement (see IEC 63096.20203:1:36)" "Teleworking (See IEC 63096.20203:1:38)" "Tools (see IEC 63096.20203:1:39)" "Virtualization (see IEC 63096:

20203:1:40)" "World Wide Web (see IEC 63096.20203:1:41)":

---In order to adapt to my country's technical conditions, this document deletes abbreviations not used in the main text of Chapter 4, including:

---In order to adapt to my country's technical conditions, this document has made technical adjustments to Chapter 5, including:

- Change the title from "Safety Control of Nuclear Power Plant Instrumentation and Control Systems" to "General Principles" to better suit the content of this chapter and GB/T 1.1-Relevant requirements in 2020 (see Chapter 5);

- Adjust the description of network security prevention and control sources in 4:2:1 in IEC 63096:2020 to informative appendix A (see citation Word);

- Added relevant statistical data description on the safety control list (see 5.3:1);

- The description of the meaning of safety control of the instrumentation and control platform and the instrumentation and control system body has been deleted (see IEC 63096.20204:3), and Relevant definitions and descriptions have been added to terminology;

- Change "IEC SC45A network security standard" to "relevant network security standards" (see 5.4:1, 5:4:2:1);

- Updated "Ontology safety management and control is executed on the instrument and control platform through the development environment without the need to carry out instrument and control platform development activities" Change to note (see 5.4:2:3):

---In order to adapt to my country's technical conditions, this document has made technical adjustments to Chapter 9, including:

- Change "ISO/IEC 19770" to "Relevant Management Requirements" [see 9.1:1c)];

- Changed the duplication of life cycle stages in IEC 63096:2020 [see 9.3:4d)]:

---In order to adapt to my country's technical conditions, this document has made technical adjustments to Chapter 10, including:

- Changed the management requirements for the use of wireless networks by instrument and control systems with levels S3 and BR [see 10.1:2:4b)];

- Changed the duplication of life cycle stages in IEC 63096:2020 [see 10.4:3c)]:

---In order to adapt to my country's technical conditions, this document has made technical adjustments to Chapter 11, including:

- Clarify the relevant national guidance as the "Cryptozoology Law of the People's Republic of China" [see 11.1h)]:

---In order to adapt to my country's technical conditions, this document has made technical adjustments to Chapter 12, including:

- Changed the duplication of life cycle stages in IEC 63096:2020 [see 12.2:5e)];

- Changed the unspecified life cycle stages in IEC 63096:2020 [see 12.1:1g), 12:1:3b), 12:1:3q), 12:2:1q)];

- Added explanation about the "two-person principle" [see 12.1:2g)]:

---In order to adapt to my country's technical conditions, this document has made technical adjustments to Chapter 13, including:

- Change the website link address for vulnerability release in IEC 63096:2020 to "Public Network for Vulnerability Release" Station" (see 13.6:3);

- Optimized the example on management capacity requirements in IEC 63096:2020 (see 13.1:3):

---In order to adapt to my country's technical conditions, this document has made technical adjustments to Chapter 17, including:

- Added relevant requirements for the establishment, implementation and maintenance of network security programs (see 17.1:7):

---In order to adapt to my country's technical conditions, this document has made technical adjustments to Chapter 18, including:

- Change the requirements of IEC related guidelines and standards in IEC 63096:2020 to "according to relevant standards of nuclear power plants" (See 18.2:1):

The following editorial changes have been made to this document:

---In order to coordinate with existing standards, the name of the standard is modified to "Nuclear Power Plant Instrumentation, Control and Power System Network Security Prevention Management" control";

---Replace IEC 61508 with GB/T 20438 (all parts), which is equivalent to the international standard, and move it to "References" to adapt my country's technical conditions provide operability;

---Replaced ISO 15489-1 with GB/T 26162, which is equivalent to the international standard, and moved it to "References" to adapt to our country's technical standards technical conditions and provide operability;

---Replaced ISO/IEC 27007 with GB/T 28450, which is equivalent to the international standard, and moved it to "References" to adapt to our country Technical conditions and operability (see reference [5]);

---Replaced ISO/IEC 27000:2018 with GB/T 29246-2017, which is equivalent to the international standard, and moved it to "Reference document" "Contribution" to adapt to my country's technical conditions and provide operability;

---Replaced IEC 61513 with GB/T 40444-2021, which is a modified international standard, and moved to "References" to accommodate our meet national technical conditions and provide operability;

---Replaced IEC 62443-2-4 with GB/T 40682, which is equivalent to the international standard, and moved it to "References" to adapt to our country Technical conditions, providing operability;

---Replace IEC 60880:2006 with NB/T:20054-2011, which is a modified international standard, and move it to "References" to adapt my country's technical conditions provide operability;

---Replace IEC 62138 with NB/T:20055-2011, which is a modified international standard, and move it to "References" to adapt to our country Technical conditions, providing operability;

---Adopt GB/T 39786-2021 to replace NISTSP800-57 and move it to "References" to adapt to my country's technical conditions and improve Provide operability;

---Informationally quoted "ISO 31000", "IEC 62443-4-1", "IEC 62566", "IEC 62671" and "ISO/IEC TS27008" "ISO/IEC 27036 (all parts)" "ISO/IEC 27037" "ISO/IEC 29100" "ISO/IEC 29101" "IAEA 53";

---According to the national standard format requirements, the suspended paragraphs related to explanatory content in Chapter 6 to Chapter 21 have been deleted;

---In order to meet the national standard format requirements, the tabular descriptions of control in Chapters 6 to 21 are changed to text descriptions;

---Deleted some notes in IEC 63096:2020 (see Note 3 of 3:1:29, Note 1 of 3:1:32, Note 4:2:2 of IEC 63096:2020, 4:3:1 note, 4:3:4 note, 4:5:1 note, 11:2:9c) note, 14:1:1:3 note, 5:1:1 note, 15:1:3 note);

---Deleted descriptions unrelated to instrumentation and control systems [see 9.3:1(A), 15:1:1a)(1) of IEC 63096:2020];

---Deleted the relevant illustrative description [see 4.3:4, 6:2:1:2(E)(1), 8:1:1d), 8:2:1a) of IEC 63096:2020, 11:7:1, 15:1:1, 15:1:2, 19:1:2];

---Unify the repetitive descriptions of life cycle activities in 5:1 and 5:3:4 and describe them in 5:1;

---Deleted "This document applies to parties responsible for the following instrument and control related work" in 5:1 (see 4.1 of IEC 63096:2020);

--- Added supplementary instructions for the D-stage maintenance sub-activities (see 5.1:1);

---Deleted the description of the file format of Appendix C in 5:3:1 (see 4.3:1 of IEC 63096:2020);

---The title of 5:3:2 has been simplified and the complete content of the original title has been adjusted to the beginning of the text paragraph (see 5.3:2);

---Change "Chapter 5~Chapter 18 of this document complies with ISO/IEC 27002:2013 Chapter 5~Chapter 18" to "This document Chapter 6 ~ Chapter 19 refer to Chapter 5 ~ Chapter 18 of GB/T 22081-2016" (see 5.3:2);

---Adjust "In all instances of ISO/IEC 27002:2013, the term 'information security' is replaced by the term 'cybersecurity'"

Note (see 5.3:2);

---Added description of relevant symbols in Appendix C (see 5.3:3);

---Change the control format description described in column items to paragraph description (see 5.3:4);

---Change the title of 5:2 to "Security prevention levels, instrumentation and control tools, and coordination of nuclear safety and network security" according to the content (see 5.2);

---Deleted the duplicate description in 5:2:2 and 5:4:6:2 (see 4.2:2 of IEC 63096:2020);

---Change the title of 5:3:2 to "Main basis for safety control" (see 5.3:2);

---Reference "Chapter 6 ~ Chapter 19 of this document to Chapter 5 ~ Chapter 18 of GB/T 22081-2016, and add Chapter 20 and "Chapter 21" have been adjusted to 5:3:2 for unified explanation (see 5.3:2);

---Deleted the repetitive description "This guideline is consistent with IEC 62645" (see 4.4:2:1 of IEC 63096:2020);

---Deleted the explanatory content in brackets in the title (see 4.4:2:2~4:4:2:6 of IEC 63096:2020);

---Deleted the repetitive description "The safety level assignment process is detailed in IEC 62645 (see 4.4:2:2 of IEC 63096:2020);

---Change the title of Chapter 6 to "Security Strategy and Review" (see Chapter 6);

---Deleted unnecessary descriptions "under the premise that they should be in a form that is relevant, usable, and understandable to the intended readers" (see 5.1:1 of IEC 63096:2020);

---Deleted some duplicate descriptions (see 9.1:1, 9:1:1:7, 9:1:1:8, 9:1:1:9, 9:1:1:10, 9:1:1:11, 9:1:2);

---Delete the exemplary description "such as software identification tag 16-byte string" [see 8.1:1(D) of IEC 63096:2020];

---Deleted part of the "other information" description (see 10.1:1, 11:1:1, 11:2:1, 11:2:6, 11:2:9, IEC 63096:2020, 12:2:1, 12:4:1, 12:4:2, 12:4:3, 12:4:4, 12:6:1, 12:6:2, 13:1:1, 13:1:2, 13:2:1, 13:2:2, 13:2:3:1, 13:2:4, 14:2:1, 14:2:2, 14:3:1);

---Deleted the repetitive description "(including instrumentation and control equipment)" (see 11.2:4 of IEC 63096:2020);

---Deleted the repetitive description "Appropriate and timely measures should be taken to identify potential technical vulnerabilities" (see IEC 63096:2020 12:6:1);

---Deleted the example description "includes: removing device, failed login attempt, detecting malware, modifying executable files to be non-uniform "Communication telegram to data" [see 13.1:1:4:2(A) of IEC 63096:2020];

---Deleted the explanatory note "Although the device supports physical connection, the instrument and control system cannot be tampered with" [See IEC 63096:

13:1:1:7(B) of 2020];

---Deleted the explanatory note "so that it can be detected if someone has broken the seal" [see IEC 63096:2020 13:1:1:7(C)];

---Deleted the relevant description of the use of wireless networks [see 13.1:3(A) of IEC 63096:2020];

---Deleted the explanatory note "However, within the level of implementation of the measure" [see IEC 63096:2020 13:1:2:3(A)];

---Deleted relevant product examples [see 13.6:4a) of IEC 63096:2020];

---Added a note about "network" (see 14.1:1:6);

---Deleted the description of the wireless network reference document (see 14.1:3:4 of IEC 63096:2020);

---Deleted the explanatory note "because of tampering with the instrument and control system during this type of activity" [see 14.2:9 of IEC 63096:2020 (B)];

---Deleted the illustrative description "for example, IT service infrastructure components" [see 15.1:1a)(1) of IEC 63096:2020];

---Deleted the repetitive description "(see above)" [see 17.1:2(A) of IEC 63096:2020];

---Deleted redundant descriptions about implementation tools [see 18.1:3d), 18:2:3(A) of IEC 63096:2020];

---Deleted the illustrative description "for example, instrumentation, control and ES systems" [see 19.1:1:3(B) of IEC 63096:2020];

---Deleted direct references to parts of the IAEA (see 19.2 of IEC 63096:2020);

---Deleted the repetitive description "Multiple sets of tools can be used" [see 20.1:1(C) of IEC 63096:2020];

---Change the example of relevant NIST documents to "Nuclear Power Plant Cybersecurity Technical Policy" (see Appendix A);

---Change Appendix B in IEC 63096:2020 to relevant content regarding safety precaution level considerations;

---Appendix C has been adjusted simultaneously according to the modification of the main text;

---Taking into account the differences in the customary format of the applicability statement, Appendix D has been deleted;

---Considering the actual situation of network security staffing in China, Appendix E has been deleted:

Please note that some content in this document may be subject to patents: The publisher of this document assumes no responsibility for identifying patents:

Introduction

This document is based on the framework of GB/T 22081-2016 and modifies the security control requirements specified in GB/T 22081-2016:

By refining, supplementing and adding new content not covered in GB/T 22081-2016, it provides digital instrumentation and control systems for nuclear power plants:

System special network security control classification list (see Appendix A for all source documents of network security control) for users to choose and apply:

One of the goals of developing this document is to make it an independent standard that does not need to be used in conjunction with GB/T 22081-2016:

Without analyzing the consequences from the perspective of nuclear power plant instrumentation and control, subsequent modifications to GB/T 22081 will not automatically affect this document:

Nuclear power plant instrumentation and control system network Security prevention and control

1 Scope

This document specifies the instrumentation and control systems of nuclear power plants (the instrumentation and control systems mentioned in this document refer to digital instrumentation and control systems):

system (hereinafter referred to as "instrumentation and control system") network security prevention and control (hereinafter referred to as "security control") classification list, and provides users with choices and applications:

Used to prevent, detect and correct computer network attacks on digital instrumentation and control systems of nuclear power plants:

This document applies to all stages of the instrumentation and control system life cycle of new nuclear power plants (including instrumentation and control platform development, instrumentation and control system engineering construction, instrumentation and control system control system operation and maintenance, decommissioning, etc:) safety control measures selection and execution activities, also applicable to the update or modification of in-service instrumentation and control systems of nuclear power plants make: The network security prevention and control of nuclear power plant electrical systems can also be implemented with reference to this document:

2 Normative reference documents

The contents of the following documents constitute essential provisions of this document through normative references in the text: Among them, the dated quotations for undated referenced documents, only the version corresponding to that date applies to this document; for undated referenced documents, the latest version (including all amendments) applies to this document:

GB/T 15474-2010 Classification of instruments and control functions important for safety in nuclear power plants (IEC 61226:2009, MOD) GB/T 20985 (all parts) Information technology security technology network security incident management [ISO/IEC 27035 (all parts)] GB/T 22081-2016 Information technology security technology network security control practice guide (ISO/IEC 27002:2013, IDT) GB/T 25068 (all parts) Information technology security technology network security [ISO/IEC 27033 (all parts)] GB/T 31722-2015 Information technology security technology information security risk management (ISO/IEC 27005:2008, IDT) GB/T 33007-2016 Industrial communication network and system security Establishing security procedures for industrial automation and control systems (IEC 62443-2-1:2010,IDT)

3 Terms and definitions

The following terms and definitions apply to this document:

Instrument and control platform I A set of hardware and software components that work together in one or more defined architectures (configurations): Instrumentation and control engineering tools can be used to develop core