BS EN IEC 62443-4-1:2018 specifies process requirements for the secure development of
products used in industrial automation and control systems. It defines a secure development
life-cycle (SDL) for the purpose of developing and maintaining secure products. This life-cycle
includes security requirements definition, secure design, secure implementation (including
coding guidelines), verification and validation, defect management, patch management and
product end-of-life. These requirements can be applied to new or existing processes for
developing, maintaining and retiring hardware, software or firmware for new or existing
products. These requirements apply to the developer and maintainer of the product, but not to
the integrator or user of the product. A summary list of the requirements in this document can
be found in Annex B.Cross References:IEC 62443-2-4:2015IEC 62443-2-4:2015/AMD1:2017IEC 62443-4-2ISO/IEC 15408-1IEC 62443-2-1IEC TR 62443-2-3IEC 62443-3-3ISO/IEC 10746-1IEC TR 62443-2-2IEC TR 62443-1-4ISO/IEC 15408-3IEC 62443-3-2ISO/IEC 30111ISO/IEC 27002ISO 9001IEC 62740ISO/IEC 27036-3ISO/IEC 10746-2IEC 61508 (all parts)ISO/IEC 29147ISO/IEC 15408-2IEC TR 62443-1-2ISO/IEC 27001IEC TS 62443-1-3IEC TS 62443-1-1IEC TR 62443-3-1:2009All current amendments available at time of purchase are included with the purchase of this document.