Reference number
ISO/IEC TR 6114:2023
© ISO 2024
Technical Report
ISO/IEC TR 6114:2023
Cybersecurity — Security considerations throughout the product life cycle
Edition 1
2023-10
Technical Report
Preview
недоступно на русском языке
Опубликовано (Версия 1, 2023)

Тезис

This document describes security considerations throughout the product life cycle (SCLC), which is a framework that spans the entire information and communications technology (ICT) product life cycle. The aim of the framework is to align the industry and bring greater transparency to customers at every point on the ICT product life cycle.

This document describes the following items for suppliers, end users (consumers), intermediaries of the ICT supply chain, service providers, and regulators:

—     definition of phases in the ICT product life cycle from concept to retirement;

—     threat vectors possible in each phase of the life cycle;

—     potential controls against those threat vectors.

The target audiences of this document are suppliers and consumers of ICT products, including all participants throughout the supply chain such as silicon chip designers, fabricators, product assemblers, logistics providers, service providers, and information security organizations. Clauses 5 to 11 target an organization’s strategic and risk management teams. This document provides an end-to-end view of the threats in each phase to help the organization shape their plans, procedures and policies.

Общая информация

  • Текущий статус
     : Опубликовано
    Дата публикации
     : 2023-10
    Этап
    : Опубликование международного стандарта [60.60]
  • Версия
     : 1
  • Технический комитет :
    ISO/IEC JTC 1/SC 27
    ICS :
    35.030 
  • RSS обновления

Жизненный цикл

Появились вопросы?

Ознакомьтесь с FAQ

  2. Интернет-магазин
  3. Каталог стандартов
  4. МКС
  5. 35
  6. 35.030
  7. ISO/IEC TR 6114:2023