Requirement
In addition to the ECC controls 1-6-2 and 1-6-3, cybersecurity requirements in OT/ICS project management must include, at a minimum, the following:
Sub-Controls
1-4-1-1
Requirement: Cybersecurity requirements must be part of OT/ICS project's lifecycle.
1-4-1-2
Requirement: Cybersecurity requirements must be included as part of any functional and acceptance testing and evaluation process (such as Factory Acceptance Testing "FAT", Site Acceptance Testing "SAT", Commissioning Testing, Change Testing, Integration Testing and Source Code Review).
1-4-1-3
Requirement: Secure-by-design principles must be included as part of security architectural designs for OT/ICS environments.
1-4-1-4
Requirement: System development environments including testing environment and integration platforms must be protected.
References
- ECC – 2:2024 equivalent: 1-6-2
- ECC – 2:2024 equivalent: 1-6-3
