{"id":423310,"date":"2024-10-20T06:45:48","date_gmt":"2024-10-20T06:45:48","guid":{"rendered":"https:\/\/pdfstandards.shop\/product\/uncategorized\/bs-en-iec-628592020\/"},"modified":"2024-10-26T12:41:17","modified_gmt":"2024-10-26T12:41:17","slug":"bs-en-iec-628592020","status":"publish","type":"product","link":"https:\/\/pdfstandards.shop\/product\/publishers\/bsi\/bs-en-iec-628592020\/","title":{"rendered":"BS EN IEC 62859:2020"},"content":{"rendered":"<p>This document provides a framework to manage the interactions between safety and cybersecurity for nuclear power plant (NPP) systems, taking into account the current SC 45A standards addressing these issues and the specifics of nuclear I&amp;C programmable digital systems.<\/p>\n<blockquote>\n<p>NOTE In this document (as in IEC 62645), cybersecurity relates to prevention of, detection of, and reaction to malicious acts perpetrated by digital means (cyberattacks). In this context, it does not cover considerations related to non-malevolent actions and events such as accidental failures, natural events or human errors (except those degrading cybersecurity). Those aspects are of course of prime importance but they are covered by other SC 45A documents and standards, and are not considered as cybersecurity related in this document.<\/p>\n<\/blockquote>\n<p>This document establishes requirements and guidance to:<\/p>\n<ul>\n<li>\n<p>integrate cybersecurity provisions in nuclear I&amp;C architectures and systems, which are fundamentally tailored for safety;<\/p>\n<\/li>\n<li>\n<p>avoid potential conflicts between safety and cybersecurity provisions;<\/p>\n<\/li>\n<li>\n<p>aid the identification and the leveraging of the potential synergies between safety and cybersecurity.<\/p>\n<\/li>\n<\/ul>\n<p>This document is intended to be used for designing new NPPs, or modernizing existing NPPs, throughout I&amp;C programmable digital systems lifecycle. It is also applicable for assessing the coordination between safety and cybersecurity of existing plants. It may also be applicable to other types of nuclear facilities.<\/p>\n<p>This document addresses I&amp;C programmable digital systems important to safety and I&amp;C programmable digital systems not important to safety. It does not address programmable digital systems dedicated to site physical security, room access control and site security surveillance.<\/p>\n<p>This document is limited to I&amp;C programmable digital systems of NPPs, including their on-site maintenance and configuration tools.<\/p>\n<p>Annex A provides a rationale for and comments about the scope definition and the document application, in particular about the exclusions and limitations previously mentioned.<\/p>\n<p>This document comprises three normative clauses:<\/p>\n<ul>\n<li>\n<p>Clause 5 deals with the overall I&amp;C architecture;<\/p>\n<\/li>\n<li>\n<p>Clause 6 focuses on the system level;<\/p>\n<\/li>\n<li>\n<p>Clause 7 deals with organizational and operational issues.<\/p>\n<\/li>\n<\/ul>\n<h4>PDF Catalog<\/h4>\n<table border=\"1px\" class=\"des-table\">\n<tr>\n<th>PDF Pages<\/th>\n<th>PDF Title<\/th>\n<\/tr>\n<tr>\n<td><b>2<b><\/td>\n<td>undefined  <\/td>\n<\/tr>\n<tr>\n<td><b>5<b><\/td>\n<td>Annex ZA(normative)Normative references to international publicationswith their corresponding European publications  <\/td>\n<\/tr>\n<tr>\n<td><b>7<b><\/td>\n<td>English <br \/> CONTENTS  <\/td>\n<\/tr>\n<tr>\n<td><b>9<b><\/td>\n<td>FOREWORD  <\/td>\n<\/tr>\n<tr>\n<td><b>11<b><\/td>\n<td>INTRODUCTION  <\/td>\n<\/tr>\n<tr>\n<td><b>13<b><\/td>\n<td>1 Scope <br \/> 2 Normative references  <\/td>\n<\/tr>\n<tr>\n<td><b>14<b><\/td>\n<td>3 Terms and definitions  <\/td>\n<\/tr>\n<tr>\n<td><b>16<b><\/td>\n<td>4 Symbols and abbreviations  <\/td>\n<\/tr>\n<tr>\n<td><b>17<b><\/td>\n<td>5 Coordinating safety and cybersecurity at the overall architecture level <br \/> 5.1 General <br \/> 5.2 Fundamental and generic principles  <\/td>\n<\/tr>\n<tr>\n<td><b>18<b><\/td>\n<td>5.3 Thematic requirements and recommendations <br \/> 5.3.1 Delineation of security zones <br \/> 5.3.2 Provisions for coping with common cause failures (including diversity)  <\/td>\n<\/tr>\n<tr>\n<td><b>19<b><\/td>\n<td>5.3.3 Separation provisions <br \/> 5.3.4 Data communications  <br \/> 6 Coordinating safety and cybersecurity at the individual system level <br \/> 6.1 General <br \/> 6.2 Fundamental and generic principles  <\/td>\n<\/tr>\n<tr>\n<td><b>20<b><\/td>\n<td>6.3 Safety and cybersecurity coordination during the I&amp;C system lifecycle <br \/> 6.3.1 General <br \/> 6.3.2 Requirements and planning activities <br \/> 6.3.3 Design activities  <\/td>\n<\/tr>\n<tr>\n<td><b>21<b><\/td>\n<td>6.3.4 Implementation activities <br \/> 6.3.5 Verification and validation activities <br \/> 6.3.6 Installation and acceptance testing activities <br \/> 6.3.7 Operations and maintenance activities <br \/> 6.3.8 Change management <br \/> 6.3.9 Decommissioning activities  <\/td>\n<\/tr>\n<tr>\n<td><b>22<b><\/td>\n<td>6.4 Selected technical aspects of I&amp;C systems constrained by safety and cybersecurity <br \/> 6.4.1 General <br \/> 6.4.2 Logical access control for HMIs of I&amp;C programmable digital systems in control rooms <br \/> 6.4.3 Software modification  <\/td>\n<\/tr>\n<tr>\n<td><b>23<b><\/td>\n<td>6.4.4 Logging and audit capability <br \/> 6.4.5 Use of cryptography by I&amp;C systems  <\/td>\n<\/tr>\n<tr>\n<td><b>24<b><\/td>\n<td>6.4.6 System availability and function continuity <br \/> 7 Organizational and operational issues <br \/> 7.1 Governance and responsibilities <br \/> 7.2 Coordination between safety and cybersecurity staff during operations <br \/> 7.3 Safety and cybersecurity culture <br \/> 7.4 Emergency response management  <\/td>\n<\/tr>\n<tr>\n<td><b>26<b><\/td>\n<td>Annex A (informative)Rationale for, and notes related to,the scope of this document <br \/> A.1 General <br \/> A.2 Inclusion of I&amp;C programmable digital system not important to safety <br \/> A.3 Exclusion of physical security, room access control and site security surveillance systems <br \/> A.4 Exclusion of non-malevolent actions and events  <\/td>\n<\/tr>\n<tr>\n<td><b>27<b><\/td>\n<td>A.5 Exclusion of development tools and platforms  <\/td>\n<\/tr>\n<tr>\n<td><b>28<b><\/td>\n<td>Bibliography  <\/td>\n<\/tr>\n<\/table>\n","protected":false},"excerpt":{"rendered":"<p><b>Nuclear power plants. Instrumentation and control systems. Requirements for coordinating safety and cybersecurity<\/b><\/p>\n<table class=\"shortdes-table\" style=\"width: 100%\" border=\"0\" cellspacing=\"0\" cellpadding=\"0\">\n<tbody>\n<tr>\n<td>Published By<\/td>\n<td>Publication Date<\/td>\n<td>Number of Pages<\/td>\n<\/tr>\n<tr>\n<td><a href=\"https:\/\/pdfstandards.shop\/product-category\/publishers\/bsi\/\"><b>BSI<\/b><\/a><\/td>\n<td>2020<\/td>\n<td>30<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n","protected":false},"featured_media":423319,"template":"","meta":{"rank_math_lock_modified_date":false,"ep_exclude_from_search":false},"product_cat":[463,2641],"product_tag":[],"class_list":{"0":"post-423310","1":"product","2":"type-product","3":"status-publish","4":"has-post-thumbnail","6":"product_cat-27-120-20","7":"product_cat-bsi","9":"first","10":"instock","11":"sold-individually","12":"shipping-taxable","13":"purchasable","14":"product-type-simple"},"_links":{"self":[{"href":"https:\/\/pdfstandards.shop\/wp-json\/wp\/v2\/product\/423310","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/pdfstandards.shop\/wp-json\/wp\/v2\/product"}],"about":[{"href":"https:\/\/pdfstandards.shop\/wp-json\/wp\/v2\/types\/product"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/pdfstandards.shop\/wp-json\/wp\/v2\/media\/423319"}],"wp:attachment":[{"href":"https:\/\/pdfstandards.shop\/wp-json\/wp\/v2\/media?parent=423310"}],"wp:term":[{"taxonomy":"product_cat","embeddable":true,"href":"https:\/\/pdfstandards.shop\/wp-json\/wp\/v2\/product_cat?post=423310"},{"taxonomy":"product_tag","embeddable":true,"href":"https:\/\/pdfstandards.shop\/wp-json\/wp\/v2\/product_tag?post=423310"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}