Standards SettingtheStandardforAutomationr Certification ISA Education & Training Publishing Conferences&Exhibits AMERICAN NATIONAL STANDARD ANSI/ISA-62443-4-1-2018 Security for industrial automation and control systems Part 4-1: Product security development life-cycle requirements Approved 16 February 2018 NOTICEOFCOPYRIGHT This is a copyright document and may not be copied or distributed in any form or manner without the permission of ISA. This copy of the document was made for the sole use of the person to whom ISA provided it and is subject to the estrictions stated in ISA's licensetothat person It may not be provided to any other person in print, electronic, or any other form. Violations of ISA's copyright will be prosecuted to the fullest extent of the law and may resultinsubstantialcivilandcriminalpenalties. ANSI/ISA-62443-4-1-2018 Security for industrial automation and control systems Part 4-1: Product security development life-cycle requirements ISBN: 978-1-945541-82-7 Copyright @ 2018 by ISA. All rights reserved. Not for resale. Printed in the United States of America. ISA 67 T.W. Alexander Drive P.O.Box12277 Research Triangle Park, NC 27709 USA 16 February 2018 - 3 - ANSI/ISA-62443-4-1-2018 Preface This preface, as well as all footnotes and annexes, is included for information purposes and is not part of ANSI/ISA-62443-4-1-2018. This document has been prepared as part of the service of isA, the International Society for Automation, toward a goal of uniformity in the field of instrumentation. To be of real value, this document should not be static but should be subject to periodic review. Toward this end, the Society welcomes all comments and criticisms and asks that they be addressed to the Secretary, Standards and Practices Board; ISA; 67 T.W. Alexander Drive; P. O. Box 12277; Research Triangle Park, NC 27709; Telephone (919) 549-8411; Fax (919) 549-8288; E-mail: [email protected]. metricsystemof unitsingeneral,andtheInternationalSystemof Units(sl)inparticular,inthe preparation of instrumentation standards. The Department is further aware of the benefits to USA users of iSA standards of incorporating suitable references to the Si (and the metric system) in their business and professional dealings with other countries. Toward this end, this Department will endeavor to introduce Sl-acceptable metric units in all new and revised standards, recommendedpractices,andtechnical reportstothe greatestextent possible.StandardforUse of the International System of Units (Sl): The Modern Metric System, published by the American Society for Testing & Materials as IEEE/ASTM SI 10-97, and future revisions, will be the reference guide for definitions, symbols, abbreviations, and conversion factors. It is the policy of IsA to encourage and welcome the participation of all concerned individuals and interestsinthe development ofISA standards,recommendedpractices,and technicalreports Participation in the ISA standards-making process by an individual in no way constitutes endorsement by the employer of that individual, of isA, or of any of the standards, recommended practices, and technical reports that ISA develops. CAUTION ISA adheres to the policy of the American National Standards Institute with regard to patents. If isA is informed of an existing patent that is required for use of the document, it will require the owner of the patent to either grant a royalty-free license for use of the patent by users complying with the document or a license on reasonable terms and conditions that are freefrom unfairdiscrimination. Even if isA is unaware of any patent covering this document, the user is cautioned that implementation of the document may require use of techniques, processes, or materials rights that may be involved in implementing the document. SA is not responsible for identifying all patents that may require a license before implementation of the document or for investigating the validity or scope of any patents brought to its att