CYBERSECURITY SERVICES ྪஏҾඇޜခ঻ถ

෢௮ܾྼஓ

କ঴߸ܠ႑တ

ࡽೕ ๫ࡽዚࠅ

SGS࿢்ڦᇼৠ

Our vision

ඤ൧׵႑Ljओटظႎ

Enthusiasm, integrity, positive, innovation

ࠓණኤऐࢅĂॠᄓ֪๬ڦණࠅाࡔ๟SGS

ሞ࿢்෽ڦ׊ॠᄓĂ६ۨĂ֪๬ࢅ

ණኤޜခଶᇘփ܏߀৊Ă૰ኋྜெ

ඇ൰ྺׯ๟ణՔڦ்࿢

ࠓခऐޜڦ૰ׂิࢅ૰ፌਏ৪ኛ

๔ዕྺԨཱིतඇ൰ਜ਼ࢽ

ခޜୁᅃࠃ༵

01

02

SGSྪஏҾඇํᄓ๪Փքඇ൰

܈໏ࡔዐ ᄸ๫ाࡔ

ԛ৙Ăฉ࡛຿ॿĂฉ࡛۫೶Ă࠽ዝĂศᒰĂઑ෷Ă໼ԛڪ

ڪೢेĂႎࡔĂெࡔ݆૧ĂںનĂဇӬცĂӎࢁ

SGSྪஏҾඇํᄓ๪

Cybersecurity laboratory

03 IEC 62443 CBጨዊ

ֱკྪበiecee.org

EN 303 645 CBጨዊ

ֱკྪበiecee.org

IEC 62443 GACጨዊ

ֱკྪበgac.org.sa

EN 303 645ࢅTS 103 701 GACጨዊ

ֱკྪበgac.org.sa

RED 3.3 d/e/fྪஏҾඇNCBጨዊ

ֱკྪበwebgate.ec.europa.eu

SGSྪஏҾඇጨዊ

Cybersecurity accreditation

04

SGSഄ໲ඇ൰ጨዊ

Other global accreditations

ࠓණኤऐࢅĂॠᄓ֪๬ڦණࠅाࡔ๟SGS

PSTI (ᆈࡔ೗ׂҾඇᇑۉ႑एإยแ

݆ӄ)ᇀ2021౎11ሆ༵؜Lj2022౎

12ሆ6නኟ๕ิၳLjժߴᇎ዆ሰฆĂ

৊੨ฆݴࢅၨฆ12߲ሆڦጚԢ้क़

ᅜۙኝഄฆᄽႜྺăሞᅃ౎ڦጚԢ

೺၌ࢫࡗ)ॽᇀ2024౎4ሆ29නਸ๔

ኟ๕॔࠶(Lj৊෇ᆈڦࡔၩݯૌ࿿૴

ྪׂ೗਩Ⴔᄲ஢ፁ޿݆ӄă॔࠶ऐ

ᅜتິࠅڦᄲ൱๰࿄ፏܔ඄ॽᆶࠓ

ፌߛ1,000ྤᆈԃईඇ൰౎๭෇ڦ

4%ڦ੼݁Ljᅜत௅ཀፌߛ20,000

ă݁੼ࡀྵڦᆈԃ

ྷݔ೗ׂᆩ๢

(Ԉઔڍփ၌ᇀᅜူ૩ጱ)ǖ

• ዇ీ๮ऐ

ᄙำഗࢅ๫ۉ၎ऐĂ• ૴ྪ

• ૶থڦܹཡ྘ਏࢅᆊܹ॔๫ഗ

• ੗૶থҾඇ၎࠲,೗ׂ૩සჶ࿽༑

֪ഗࢅோ໮

• ܠ߲ยԢ૶থڦڟྪ૴࿿एበࢅण

၍ഗ

• ੗ٻح૶থॳวጕጷഗ

๮ڦٻح੗Lj૩සփှׂ೗Ⴉྔࢽ •

থGPSยԢ૶׼

• ૶থڦॆབྷጲࢅࣅۯয়Ԓဣཥ

• ૴ྪยԢLj૩සဢᅊऐࢅգၒ

• ዇ీॆਃዺ๮

గၵׂ೗ॽԥಇأሞྔLj૩ස;

՗ۉీ዇ •

• ᅅଐยԢ

(כഛۯۉᆩᇀ(ۅۉ؊ీ዇ࢅଈכ •

ᅜူׂ೗փሞ๢ᆩݔాྷǖ

• ໼๕ۉసĂԴऻԨۉస(14໠ܹཡ

ᅜฉ๑ᆩڦ(೗ׂĂփీ๑ᆩނ

࿡ྪஏڦೝӱۉస

՗ۉీ዇Ăכഛۯۉ •

• ᅅଐยԢ

PSTI०঻ PSTI๢ᆩׂ೗ݔྷ

05 SGS UK PSTI֪๬ණኤޜခ

UK PSTI test and certification service

PSTIྪஏҾඇᄲ൱

PSTI SECURITY REQUIREMENTS

PSTI ాඹ ֖੊Քጚ

௢ஓՂႷǖ

ܾ࿮ᅃ܀೗ׂ߲௅ •

• ᆯᆩࢽۨᅭ

௅ׂ߲೗ڦྸᅃ௢ஓ্ኹǖ

• एᇀሺଉऺຕഗ

؜ڥਸ႑တዐࠅٗਸ႑တईࠅएᇀ•

• ᅜतඪࢆᅟᇀ֊֪ݛڦ๕

ஓփԈઔǖ௢ڦዐ܎Ԩ

• े௢௢ሃ

• ದܔpinஓ

• API௢ሃ

዆ሰฆ዁ณ༵ࠃᅃ߲ൣညཪ௽ڦർڢLj

Ҿඇڦ೗ׂྪ૴੗࠲၎ߢටԒࢆሎႹඪ

࿚༶ăժत้ݒઍ኱ڟҾඇ࿚༶঴ਦă൐

ࠃ༵ᅜᆈ࿔•

ࠃ༵ݯ௨•

• ࿮Ⴔᄲ൱༵ࠃ߲ට႑တ

• ዆ሰฆႴᄲᆶ௽ඓ൐ཪ௽ݛڦ๕ܔᆩ

ࠅࢽքፌڦ܌Ҿඇ߸ႎዜ೺

!೺׼ኧڦᅭۨ܌໫ڥփࢫք႑တ• ݀

௢ஓᄲ൱

୑۴࠶૙ᄲ൱

Ҿඇ߸ႎዜ೺

EN 303645

• provision 5.1-1

• provision 5.1-2

EN 303645

• provision 5.2-1

ISO/IEC 29147

• paragraph6.2.2

• paragraph6.2.5

• paragraph 6.5

EN 303645

• provision 5.3-13

ၜణ SGSޜခ ਜ਼ࢽ

PSTIՔጚಢჟतණኤޜခ

PSTI EN 303645Քጚಢჟतණኤޜခ

PSTIණኤޜခ

č

዇ీॆਃยԢ

ཚ႑ఇ੷ยԢ

ܠీ዇੼ฝၟཀྵ

č

గኪఁॆۉׂิฆ

గႜᄽଶံཚ႑ఇ੷ฆ

గ዇ీฝၟऐิׂฆ

č

SGSॺᅱ

SGSޜခᅜतࠀׯӄ૩

੊୯౞๟ޏ݆ࡀዐڦ዆ሰฆĂ৊੨ฆईኁݴၨฆ

ྷݔࡀ݆ᇀຌޏ๟೗ׂڦࠃ༵ࡔሞᆈۨ౞ඓ

ැࢇޙᅜฉᄲ൱LjሶႴᄲ৊ႜPSTI֪๬ණኤă

06

ۅጀ࠲

ยԢ๎՚Ăದዃ\\඄၌࠶૙Ăຕ਍

Ă࿚ݡĂথ੨๼)دࢅئ٪)ࢺԍ

෉ॲืप

ः௨ཉ੼

዆ሰฆփܔᆯ๑ᆩኁҾጎڼڦෙ

ሴ޶ॲईኁᆌᆩ෉ݛ

07 NIST 8259A/SB-327֪๬ණኤޜခ

NIST 8259A/SB-327 test and certification

service

NIST 8259A

NISTIR 8259ဣଚԒߢ዆ྺሰฆत

்໱Ljӻዺڞኸࠃ༵ݛෙڼ׼ኧഄ

ࠓາĂยऺĂਸ݀Ă֪๬Ăၨ๳ࢅ

ยԢă࿿૴ྪڦాྷݔࢽਜ਼ഄ׼ኧ

ഄዐNISTIR 8259Aǖࢃ႐ยԢྪஏ

Ҿඇీ૰ए၍(2020౎5ሆ29න)Lj

ྺ࿿૴ྪ(IoT) ยԢ዆ሰฆ༵ࠃथႴ

ࢽਜ਼ഄ׼७Ljᅜኧॅํፌࢅڞኸڦ

ҾඇణՔăڦ

California Bill SB 327

ெࡔेዝሞ2018౎၎ीཚࡗକᇑᆆ

ຳԍࢺ၎ڦ࠲ଇևႎ݆ࡀǖĖेዝၩ

ݯኁᆆຳ݆ė(CCPA)ࢅĖ႑တᆆຳǖ૴

ྪยԢė(CA SB 327& CA AB 1906)Lj

ժॽᇀ2020౎1ሆ1නഐਸ๔ํแă

SB-327݆ӄĖ႑တᆆຳǖ૴ྪยԢė

ሶܔྪ૴ยԢڦ႑တҾඇ༬Ⴀ༵؜କ

ᄲ൱Lj૴ྪยԢڦ዆ሰฆᆌྺยԢ

ದഄ๢ᆩׂ೗ݔڦ੊֖੗ྷEN 303

645ࢅNISTIR 8259Aڦ೗ׂݔྷă

NIST 8259A

ሞNISTIR 8259AዐLj๢ᆩݔྷԈઔ

փ၌ᇀǖڍ

೗ׂۉॆ/ਃ• ዇ీॆ

• ၩݯૌ዇ీऐഗට

ยԢٻح੗ీ዇ •

೗ׂૌ๨׭ࣱ዇ •

• ྪஏยԢᇑၩݯૌۉጱ

• ׂ೗॔੦ૌยԢĂ౱ཚ੣ۙ዆ૐ

ยԢ

• ഄ໱૴ྪׂ೗

California Bill SB 327

ेዝڦྪ૴ยԢҾඇ݆ሀຐڦ߳๟

ૌ኱থईक़থ૶থࢻڟྪ૴ڦยԢLj

ยԢă૴ྪڦ኷ںईઢც኷ںनᆶIP

ኄૌยԢڦӄ૩ᆶǖ

• ૴ྪ዇ీ྘ਏࢅᆊܹ॔ࢺഗ

೗ׂݞҾ• ૴ྪ

(ჶ࿽Ԓয়ഗĂோ໮ڪ(

• ዇ీฝၟཀྵĂ዇ీۉ๫Ă዇ీᅼၒ

ྪ૴ጕጷᅏॳ੃ٻح੗ •

• ॆབྷጲࣅۯยԢࢅԒয়ยԢ

ۉॆీ዇ྪ૴ •

(ڪգၒĂဢᅊऐ (዇ీ

• ዇ీॆਃዺ૙

૙ࢇሰฆᆌ๑ยԢਏԢ዆ยԢ૴ࢻ

༬ీࠀڦҾඇ༬ኙLj๑ኮᇑยԢڦ

Ⴀ၎೅ದǗࢅยԢ໇णLjئ٪ईኁ

ԈࢅยԢࢺݞದǗ೅႑တ၎ڦ๼د

Ăൔ෇ڦ඄๲࿄ڟ๴ࣷ႑တփڦࡤ

໦࣋Ă๑ᆩĂႪ߀ईႅ୞ă

සࡕยԢਏᆶਆᇘྪྔڦวݻᄓኤ

ݛ๕Ljఫ஺௅ᅃ໼ยԢᇨ዆௢ஓᆌ

ړྸ๟ᅃڦLjईኁ໲ਏԢᅃዖҾඇ

༬Ⴀᄲ൱ᆩࢽሞڼᅃْک୥മీׂ

ิᅃዖႎ६ۨݛ๕ă

ெࡔྪ૴ยԢڦ႑တҾඇᄲ൱ ๢ᆩׂ೗ݔ ྷSB-327ڦዷᄲాඹ

ยԢՔ๎

࿿૴ྪยԢ੗ᅜሞஇडࢅ૙࿿ฉ৊

ႜྸᅃՔ๎ă

NIST 8259AڦྪஏҾඇᄲ൱

SGSޜခ

ยԢದዃ

࿿૴ྪยԢ෉ॲڦದዃ੗ᅜ߸߀Lj

ժ൐ُૌ߸߀ኻీᆯ๲඄ํ༹ኴႜă

ຕ਍ԍࢺ

๼دࢅئ٪ഄࢺᅜԍ੗ยԢ࿿૴ྪ

ă߀Ⴊࢅ࿚ݡڦ඄๲௨ሦ࿄ঢ়਍ຕڦ

࿚ݡஇडڦথ੨ܔ

ยԢ੗ᅜॽܔԨഄࢅںྪஏথ੨ᅜ

तኄၵথ੨๑ᆩڦၹᅱޜࢅခڦஇ

डݡ࿚၌዆ྺৈ๲඄ํ༹ă

෉ॲ߸ႎ

࿿૴ྪยԢڦ෉ॲኻీᆯ๲඄ํ༹

๑ᆩҾඇ൐੗ದዃڦऐ዆৊ႜ߸ႎă

ྪஏҾඇጒༀᅪ๎

࿿૴ྪยԢ੗ᅜԒߢྪഄஏҾඇጒ

ݡ༹ํ඄๲ࠃ੗႑တৈ޿ༀLjժ๑

࿚ă

֪႙ࢇްࡀ݆ڦ࠲ԛெ၎ࠃ༵SGS•

๬ᄓኤޜခLjᅜत୑۴෢௮Ăา

ཪ֪๬ܠڪዖྪஏҾඇ֪๬ăᅃ

ॏڦگ߸ݯࢾ౞ᅜඟ੗ခޜበ๕

ඹLjాࠚೠڦܠీ੗৑ׯྜLj߭

ํ၄ၳᅮፌࣅۇٴዺ૰ਜ਼ࢽইޅگ

၃Lj஢ፁ๨ׇ݆ࡀă

• SGS๟ܠຕྔࡔசॆණ੗ڦํᄓ๪Lj

֖ᇑࡔྔசॆ/ଭ๳ฆڦprotocol

ഐ֥ెۨ߾ፕLj༵ࠃᅃበ๕ޜခLj

஢ፁࡔྔசॆᄲ൱ă

ׂڦ೺ࢫ࿋ၹዺණኤݛඇࣷSGSॽ•

ཞਉӸӰኤᅏ๕LjၹࠌăدჇ೗

ዺಆฝჇد๫ೕLjጉႀჇد෉࿔Lj

ժ૴ࢇ৊༹௃ႜཞօჇدLj৊ᅃ

Ⴀă඄ྰࢅ૰ᆖၚڦ೗ׂۇٴօક

SGSॺᅱ

዆ሰฆᆌ޿ǖ

੊୯ׂ೗ڦิంዜ೺ڦ႑တҾඇLjৃཀுᆶ࿚༶Ljփپ௽՗ཀ৽ுᆶޅ၃Lj౞ڦ೗ׂሞၩݯኁ๮ฉ๑ᆩܠ৳Ǜ

ॽྪஏҾඇᄲ൱ڦ๎՚ࢅํแ๫ྺׂ೗ਸ݀ࢅิంዜ೺ኧ׼ୁڦײᅃ߲ፇׯևݴ

๎՚؜ణՔਜ਼ࢅࢽ்໱ڦ๑ᆩ࣍ৣLjჺ৯໱்ܔ႑တҾඇڦႴ൱ࢅᇨ೺Lj֑ൽՂᄲٯڦแᅜतࢅၩݯኁڦ

๕ݛཚࠏ

08

౹ዞۉ႑Քጚࣅၹࣷ(ETSI*ྪஏҾඇरຍ྿ᇵࣷᇀ2020౎6ሆ݀քEN 303 645

Cybersecurity for Consumer Internet of Things: Baseline Requirementsă

ยԢĂཚڦ೗ׂྪ૴࿿ૌݯၩܔၾLjྰஏҾඇྪڦዘᄲࢅ९׉਍ߵՔጚ޿

ڦ೗ׂߛ༵Ljॺ૬ഐҾඇए၍Ljۨࡀକ13ཉҾඇႠ؜༵Ҿඇ਍ටຕ߲ࢅ႑

ྪஏҾඇీ૰ă

ೠࠚဦሶ

ETSI TS 103 701 (Assessment Methodology for Consumer IoT Devices)

ኸڞဦሶ

ETSI TR 103 621 (Guide to Cyber Security for Consumer Internet of Things)

SGS EN 303 645֪๬ණኤޜခ

EN 303 645 test and certification service

๢ᆩׂ೗ݔ)ྷԈઔڍփ၌ᇀᅜူ૩

ጱ)ǖ

• ૴ྪܹཡ྘ਏࢅܹཡ॔๫ഗ

• ૴ྪҾݞ೗ׂLjԲසჶ࿽Ԓয়ഗࢅ

ோ໮

• ࿿૴ྪྪ࠲Ăएበܠࢅ߲ยԢ૶থ

౨๸ڦ

• ዇ీฝၟཀྵĂ዇ీۉ๫Ă዇ీᅼၒ

• ૴ྪॆབྷጲࣅۯยԢࢅԒয়ยԢ

ऐں෢ ,ഗࣅഘ৫(੣ۉॆీ዇ྪ૴ •

ഗටڪ(Ă዇ీॆਃዺ๮

ጕጷᅏॳ੃ٻح੗ •

EN 303645०঻ ๢ᆩׂ೗ݔྷ

09

EN 303 645ࢇޙႠೠࠚၜణୁײ

SGSీࠕӻዺ౞

ӻዺഓᄽࡀՆޅ၃

࿄৊ႜྪஏҾඇೠڦࠚ٪೗ׂሞሦ

ڟྪஏ߿ऍĂႅ୞ഓᄽᇑᆩࢽຕ਍Ă

ࣷ዁၃Ljฯޅڦ๑ᆩ׉ኟׂ೗࿮݆

௬ଣܮߛ੼݁ă

ᄲ൱ࡀࢇ

๨ڦࡔ߳ඇ൰ྺׯஏҾඇኟደօྪ

ׇጚ෇ഽ዆ᄲ൱Lj৊ႜೠࠚᇑණኤ

ᅜԍኤׂ೗ࡀࢇڦႠLjඓԍׂ೗ຩ

૧৊ጂׇ࡛๨ྔă

دჇׇ๨

ၩݯኁܔྪஏҾඇ߸ेዘ๫Ljڍ๨

ׇฉ৊ႜҾඇೠڦࠚഓᄽডณă৊

ႜҾඇೠࠚీࠕӻዺׂ೗ሞཞૌ႙

ׂ೗ዐྃᆗܸ؜ă

ၜణ૬ၜ ጨଙགႀᇑอࢃ ԒߢՊႀत

ߢኤກԒ݀ധ ࠚᄓኤೠ ࢃอࡕ঳ࠚೠ

༵ࠃ೗ׂຫ௽ກ

ᇑ࿚ਝೠࠚၜణ

ഔۯҾಇศ܈Ք

ጚಢჟඓۨၜణ

ྷݔ๬֪ࢅဦব

ၹዺਜ਼ࢽགႀׂ

೗रຍጨଙ(DUT,

ICS, IXIT)อࢃҾ

ඇํ၄௮ຎ๟ޏ

ీ஢ፁՔጚᄲ൱

Lj׼रຍኧࠃ༵

ጨׯྜࢽӻዺਜ਼

ଙጚԢ

ࠚႜೠׂ೗৊ܔ

ᇑ֪๬Ljඓණ๟

ፁՔጚᄲ൱஢ޏ

ࠃ༵߀ኝྺׂ೗

रຍኧ׼ཞօ߸

ႎरຍጨଙ!

ඓණׂ೗त࿔ڗ

஢ፁᄲ൱ࢫLjՊ

ႀԒߢतኝ૙၎

༵ڗĂ࿔ࡕ঳࠲

ׂतࡕ঳๬֪঍

೗रຍ࿔ڪڗՂ

ᄲጨଙڟ SGSर

ຍ྿ᇵࣷอֱ

ധ݀ኤກĂԒߢ

Ӱ݀SGS MarkՔ

๎ದࢇਜ਼ࢽ৊ႜ

Ԉઔࠅዚࡽ࿔ቤĂ

ႎ࿕ߡĂӰኤᅏ

ۯऄدჇڪ๕

ၜణ SGSޜခ ਜ਼ࢽ

EN 303645ՔጚಢჟIXIT࿔ॲགႀኸڞLj

तණኤޜခ

EN 303645ՔጚಢჟIXIT࿔ॲགႀኸڞLj

तණኤޜခ

ՔጚಢჟĂ႑တҾඇႴ൱ᇑ߁঴૙౒Ă

IXIT࿔ॲགႀኸڞLjतණኤޜခ

EN 303645ՔጚಢჟIXIT࿔ॲགႀኸڞLj

तණኤޜခ

č

WIFIཚ႑ఇ੷

዇ీဢںऐ

࠲ྪీ዇ᆩॆ

ॆᆩ૴ྪฝၟཀྵ

č

గኪఁཚ႑ఇ੷׍ฆ

గႜᄽଶံ዇ీॆਃ዆ሰฆ

గႜᄽଶံ዇ీॆਃ዆ሰฆ

గႜᄽଶံ዇ీॆਃ዆ሰฆ

č

SGSࠀׯӄ૩

10

REDྪஏҾඇ֪๬ණኤޜခ

RED cybersecurity test and certification

service

ႜጲ૴ྪ৊ࢻࡗཚࠕీࢆᆩᇀඪ๢

࿢ཚ႑ڦ࿮၍ۉยԢLj࿮ஃ໲๟኱

ྪ૴ࢻ”)ยԢഄ໱ࡗཚ๟࣏থཚ႑

૶থڦ࿮၍ۉยԢ”)ă

• ๮ऐĂೝӱۉస

࠲ྪࢅFiୟᆯഗ-Wi•

• ૴ྪ੣ۙĂգၒࢅॆ໱ഄᆩۉഗ

5GยԢ/4G/3Gࢅ࢈๫ۉ/๫ۉీ዇ •

• ໯ᆶਏᆶWi-Fiཚ႑ࠀీڦยԢ

• כሜ૴ྪፇॲ

• ీᇸဣཥዐۉڦᇸገ࣑ഗ

๢ᆩᇀت߲૙ටຕ਍Ăཚ႑ຕ਍ई

኱থۨ࿋ຕ਍ڦ࿮၍ۉยԢLjनࢻ

૴ྪ૶থڦ࿮၍ۉยԢĂܹཡࢺ૙

࿮၍ۉยԢĂ྘ਏ࿮၍ۉยԢࢅ੗

ยԢăۉ၍࿮ٻح

• ԈઔTWSሞాڦઢც૶থ๮ऐĂ

ܺऐईBoombox

ยԢۯᅎഄ໱੗ࢅ՗๮ీ዇ •

• ዇ీߌدഗĂ੣ഘ৫ࣅഗĂဌפഗ

• ᆊܹ॔๫ഗࢅ3G/4G/5GยԢ

• כሜ૴ྪፇॲ

• GPS߶ጷยԢ

๢ᆩᇀඪࢻࢆ૶ྪ૴থڦ࿮၍ۉย

ీࢽᆶටईᆩ׼ยԢ๑޿ࡕԢLjස

ࠕ৊ႜূബĂऋԼॏኵईႵెऋԼ

ገᅎăڦ

• POSऐĂATMऐ

• ኧ׼ඪࢆૌ႙ገቭڦยԢ

EN 18031-1 EN 18031-2 EN 18031-3

RED (Radio Equipment Directive)Ljन࿮၍ۉतཚრዕ܋ኸସLj๟࿮၍ૌׂ೗ڦCEڦණኤኸସă࿮၍ׂ೗ీࢇࠕ݆

ںሞ౹௑ࡔॆၨ๳ኮമLjՂႷߵ਍REDኸସኴႜ֪๬ൽڥණ੗Ljཞ้ᄺՂႷᆛᆶCE-markă2022౎1ሆ12නLj౹ዞ

྿ᇵࣷኟ๕݀քକ(EU) 2022/30݆ӄLjࡀۨ၎࠲዆೗ׂሰฆሞยऺࢅׂิዐՂႷ੊୯ڟREDኸସڦෙۅྪஏҾඇᄲ

൱Lj2025౎8ሆኟ๕ิၳLjፕྺREDණኤڦᅃևݴഽ዆ኴႜăྺُLj౹௑ᇀ2024౎8ሆ݀քକEN18031ဣଚՔጚLj

ᆩᇀೠࠚREDྪஏҾඇᄲ൱ă

EN 18031ဣଚණኤ

11

౞޿සࢆಒ܏჋ስEN 18031ڦనၵՔጚ৊ႜೠࠚ?

ײୁၜణࠚӄतೠݛSGS

ၜణ૬ၜ ጨଙགႀᇑอࢃ ԒߢՊႀत

ࢃอࡕ঳ࠚೠ

ᄓኤೠࠚ ധ݀ኤກԒߢ

ࢽਜ਼ࢅ೗ׂࠃ༵ •

օጧკ؛ڦ

• ೠࠚၜణ๟ޏഔ

ۯ

• Ҿಇጨዊೠࠚ၎

ಢჟ࠲

• ඓۨၜణ৊܈त

॰ୟ০࠲

• ၹዺਜ਼ࢽགႀׂ

೗रຍጨଙ

஢ݔࡀඓԍҾඇ•

ፁ߳ၜՔጚᄲ൱

• ๭णĂኝ૙ժၹ

ฤ൩ׯྜࢽዺਜ਼

ࠚႜೠׂ೗৊ܔ •

ᇑ֪๬Ljඓණ

ፁᄲ൱஢ޏ๟

ࠃ༵႙• ྺׂ೗ۨ

रຍጨଙ

Ԓࠚօೠ؛ਏ؜ •

ߢ

• ඓණׂ೗त࿔ڗ

ፁ஢ޏ๟ڇൣ

ᄲ൱ࢫLjՊႀ

Ԓߢतኝ૙၎

ॲ޹࠲

• ༵঍ጨଙڟSGS

ࢃอࣷरຍ྿ᇵ

• ധ݀ኤກĂԒߢ

• Ӱ݀SGS MarkՔ

๎

• ದࢇਜ਼ࢽ৊ႜჇ

دतߢࠅ݀ք(ස

ĂߡቛĂႎ࿕ࣷ

ჇڪӰኤᅏ๕

(ۯऄد

ྺ๊஺჋ስSGS?

• ሞுᆶၹۙՔጚമLj዆ሰฆՂႷཚߢࠅࡗऐࠓ)NB)ڦೠࠚઠኤ௽ഄׂ೗ࢇޙڦႠLjSGSᅙᆛᆶREDኸସڼ3(3)ཉ੼

ڦ)d)Ă(e)Ă(f)ڦඇ௬NBጨዊLj੗ྺ዆ሰฆ༵ࠃೠࠚ݀ኤLj৑ራٱਸ݆ࡀഽ዆ׂ೗णዐ֪๬ރߛڦ೺ă

• ၎ডᇀدཥՔጚLjEN 18031Ⴔᄲ዆ሰฆᆶ߸ߛ֖ᇑ܈LjժܔྪஏҾඇڦᄲ൱߁ࢅ౒ᆶଆڦࡻ঴૙ࢅᆌᆩǗᅺُLj

SGSᄺ༵ࠃጆᄽڦྪஏҾඇरຍ঴ࢅ܁ಢჟޜခLj༵ื዆ሰฆሞྪஏҾඇଶᇘڦยऺࢅᄓኤీ૰Ljྺׂ೗ຩ૧ཚ

ăإएူॕํوٴREDණኤࡗ

ਸ๔

ः௨ཉ૩ࢇޙޏ๟

ت߲૙ටຕ਍/ཚ႑ຕ਍

ยԢڦ

RED3(3)d, e,f๢ᆩ

RED3(3)d, e,fփ๢ᆩ

EN 18031 Part 1 EN 18031 Part 2 EN 18031 Part 3

ࢻ૶ྪ૴থڦ࿮၍ยԢ ภतূബ/ऋԼ/ႵెऋԼ

ገᅎڦยԢ

12

ኤກቛ๖ᅜतSGS CYBERSECURITY MARK঻ถ

ଷྔLj ౞੗ᅜฤ൩SGS Cybersecurity MarkՔኾLjُՔኾ੗ᅜൣညںׇ๨ၠ

ቛ๖ഓᄽሞྪஏҾඇݛ௬ڦ૰ీ׶ࢅ౷ăසူ཮ǖ

ཚࡗቛ๖SGS Cybersecurity MarkLj੗ᅜሺഽਜ਼ࢇࢅࢽፕअӵܔഓᄽׂ೗Ҿ

ඇႠڦ႑ඪLjᆶዺᇀ༵ߛ೗ಈำᇤăُྔSGS Cybersecurity Mark༵ࠃփཞ

ڦҾඇप՚(૩ස Standard AĂBĂCĂD)Ljഓᄽ੗ᅜߵ਍ጲวׂ೗ڦҾඇႴ

൱ࢅׇۨ๨࿋჋ስࢇ๢ڦҾඇप՚ණኤLj஢ፁܠᄣڦࣅׇ๨Ⴔ൱ă

RED 3.3 d/e/f NBኤກ

13

IEC 62443֪๬ණኤޜခ

IEC 62443 series test and certification

service

14

ຎ߁

IEC 62443-4-1ࡀۨକ߾ᄽጲࢅࣅۯ

੦዆ဣཥዐ๑ᆩڦ೗ׂҾඇਸ݀ڦ

ײࡗᄲ൱LjۨᅭକᇑྪஏҾඇ၎࠲

ڦҾඇਸ݀ิంዜ೺(SDL)ᄲ൱Lj

ժ༵ࠃକසࢆ஢ፁ௅߲ᄲ໎໯௮ຎ

ᄲ൱ڦኸళăิంዜ೺௮ຎԈઔҾඇ

Ⴔ൱ۨᅭĂҾඇยऺĂҾඇํแ(Ԉ

ઔՊஓኸళ)ĂᄓኤࢅඓණĂඍ။࠶

૙Ăցۡ࠶૙ࢅิ೗ׂంዜ೺঳ຐă

IEC 62443-2-4ՔጚྺणׯईྼࢺIACS

၎ڦ࠲໯ᆶૌ႙ޜڦခ༵ࠃฆၘဦ

ࡀۨକᅃ༫ඇ௬ڦҾඇీ૰ᄲ൱ă

ᆯᇀ ኄၵᄲ൱ܠۇٴᇑଶᇘ၎࠲Lj޿

Քጚ༵ࠃକ“ದዃ࿔ॲ”ڦਸ݀Lj੗

ᆩᇀ঴ਦ༬ۨ࣍ৣ܀ڦ༬༬ኙă

MATURITY LEVEL 1

INITIALǖᆶీ૰ሞுᆶऻ୤ୁײLj

ခǗޜࠃ༵ူ઄൧ڦ੦փፁ๴ײࡗ൐

ፕຫ߾ཞĂࢇĂײୁݔࡀ/ுᆶኟ๕

௽ກڪă

MATURITY LEVEL 2

MANAGEDǖᆶీ૰Ӏቷኟ๕ऻ୤

ခLjժᆶጆᄽኪޜࠃ༵ײୁ༬ኙڦ

๎ࢅჟଁᆶ໎ڦටᇵྺኤǗኟ๕/ࡀ

࿔ॲLjײୁǗກ௬ײୁڦްዘ੗Ăݔ

ಢჟጨଙڪă

MATURITY LEVEL 3

DEFINED/PRACTICEDǖਏԢኴႜ

ML2पڦ૰ీLjԈઔํ७ڦײࡗ޿

ڇൣֱࢃڦׯྜǗᅙঢ়਍ኤ

MATURITY LEVEL 4

IMPROVINGǖᆶీ૰ڟٳML3प

ీڦ৊߀Ⴤ׼ᆛᆶ௽LjԈઔኤ຤ೝ

૰Ǘీࠕएᇀၜణঢ়ᄓLj߀৊၄ᆶ

Ⴞăײ۩ǗႪײୁ

IEC 62443-2-4/-4-1ණኤ IEC 62443-2-4/4-1ׯຄ܈०঻

ໜጣຕጴࣅ้ڦپ݀ቛLj߾ᄽ੦዆ဣཥڦྪஏҾඇ࿚༶නᅮ཭؜Ljഓᄽ௬ଣമ໯࿄ᆶڦ቟཈ăሞኄ৪ኛघଜڦׇ๨

ዐLjසࢆඓԍᄽခࢅਜ਼ࢽຕ਍ڦॆඇׯྺ࠲॰ඪခă๨ׇܔIEC 62443ණኤڦႴ൱ደօሺेLjኄᅃණኤփৈኤ௽କ

ഓᄽሞྪஏҾඇଶᇘڦ૰ీLj߸๟ቛ๖ጆᄽ຤ೝࡀࢇࢅႠڦᆶၳ཰০ă

ྺ๊஺჋ስIEC 62443ဣଚޜခ?

IEC 62443-4-1ዐᄲ൱ٗܠྼܔ܈ׂ”

܈ຄׯႜ”৊ײୁ݀႑တҾඇਸ೗

ೠࠚă

• Ҿඇ࠶ ૙Security management

ݔࡀҾඇᄲ൱•

Specification of security

requirements

• ยऺҾඇ Security by design

• Ҿඇํแ

Secure implementation

• Ҿඇᄓኤ֪๬

Security verification and

validation testing

૙࠶༶࿚࠲Ҿඇ၎•

Management of security-related

issues

• Ҿඇืप

Security update qualification

• Ҿඇጚ֪ Security guidelines

IEC 62443-2-4ዐऻ୤କIACSޜခ༵ࠃฆሞጲࣅۯ঴ਦݛӄڦणࢅׯྼࢺऄ

ۯዐLjၠጨׂ໯ᆶኁ༵ڦࠃᅃ༫ඇ௬ڦҾඇీ૰ᄲ൱ă

IEC 62443-4-1ాඹ०঻ ༵ࠃକ೿ၜएԨᄲ൱(FR)၎ڦ࠲ၘ

ဦरຍ੦዆ဣཥፇॲᄲ൱LjԈઔۨ

ᅭ੦዆ဣཥీ૰Ҿඇप՚तഄፇॲ

ڦᄲ൱ă೿ၜएԨᄲ൱(FR)ǖ

• ๎՚ࢅණኤ੦዆(IAC)

• ๑ᆩ੦዆(UC)

• ဣཥྜኝႠ(SI)

• ຕ਍ऐ௢Ⴀ(DC)

• ๴၌ຕ਍ୁ(RDF)

• ܔ๚ॲڦत้ၚᆌ(TRE)

• ጨᇸ੗ᆩႠ(RA)

ฉຎ೿ၜFR๟ۨᅭ੦዆ဣཥҾඇీ

૰प՚ڦएإă

IEC 62443-3-3/-4-2एԨҾඇႴ൱ ߾੦ဣཥፇॲҾඇڪपᄲ൱

VALUE SP REQ.ID DESCRIPTION

SP.01.XX

SP.02.XX

SP.03.XX

SP.04.XX

SIS SP.05.XX

SP.06.XX

SP.07.XX

SP.08.XX

SP.09.XX

SP.10.XX

SP.11.XX

SP.12.XX

ޜခ༵ࠃฆྺጲࣅۯ঴ਦݛӄ၎࠲ऄۯኸ

ಋටᇵڦ၎࠲ᄲ൱

ᇑ༵ࠃጲࣅۯ঴ਦݛӄҾඇ֧୼ኴႜ႑႐

ࠓᄲ൱ॐڦ࠲၎

ᇑጲࣅۯ঴ਦݛӄยऺ၎ڦ࠲ᄲ൱

ᇑሞጲࣅۯ঴ਦݛӄዐ๑ᆩ࿮၍၎ڦ࠲ᄲ൱

ॽSISणڟׯጲࣅۯ঴ਦݛӄዐڦ၎࠲ᄲ൱

ᇑጲࣅۯ঴ਦݛӄದዃ੦዆၎ڦ࠲ᄲ൱

ᇑᇺݡײ࿚ጲࣅۯ঴ਦݛӄ၎ڦ࠲ᄲ൱

ᇑጲࣅۯ঴ਦݛӄዐ๚ॲت૙၎ڦ࠲ᄲ൱

ڦ࠲၎૙࠶ࢽቭࢽӄዐᇑᆩݛਦ঴ࣅۯጲ

ᄲ൱

ᆶ࠲ሞጲࣅۯ঴ਦݛӄዐ๑ᆩݒܱᅪ෉ॲ

ᄲ൱ڦ

ᇑ಼ጚࢅҾጎ෉ॲցۡڦҾඇݛ௬ᆶڦ࠲

ᄲ൱

ᆶ࠲Ԣ࣬ࢅݻްҾඇݛ௬ڦᄲ൱

঴ਦݛӄ

ටᇵದዃ

ԍኤ

ࠓॐ

࿮၍

SIS

૙࠶ದዃ

࿚ݡײᇺ

૙࠶๚ॲ

૙࠶ࢽቭ

ܱᅪ෉ॲ

ࢺԍ

૙࠶ۡց

ᇱ࣏/ݻԢ

SECURITY LEVEL 1

ă࡞ൔڦࢇईേ౾඗ኹݞ

SECURITY LEVEL 2

ۯگࢅీณጨᇸĂཚᆩरࡗኹཚݞ

ă࣋ᅪ೦ࠤ܎๮ڇ०ڦऐ

SECURITY LEVEL 3

ݞኹཚࡗᅃӯጨᇸĂIACS༬๺रీ

ă࣋ᅪ೦ࠤ܎๮ሗްڦऐۯᅃӯࢅ

SECURITY LEVEL 4

ݞኹཚࡗકቛጨᇸĂIACS༬๺रీ

ă࣋ᅪ೦ࠤ܎๮ሗްڦऐۯߛࢅ

15

IEC 62443-3-3Ҿඇڪप

CLAUSE REQUIREMENT

SR 1.1

SR 1.1 RE (1)

SR 1.1 RE (2)

SR 1.1 RE (3)

The control system shall provide the capabillity to identify and authenticate all human

users. This capability shall enforce such identification and authentication on all interfaces

which provide human user access to the control system to support segregation of

duties and least privilege in accordance with applicable security policies and procedures.

The control system shall provide the capability to uniquely identify and authenticate all

human users.

The control system shall provide the capability to employ multifactor authentication for

all human user access to the control system.

The control system shall provide the capability to employ multifactor authentication for

human user access to the control system via an untrusted network (see 5.15, SR 1.13

- Access via untruated networks).

IEC 62443-4-2Ҿඇڪप

CLAUSE REQUIREMENT

CCSC 4

CR 1.1

CR 1.1 RE (1)

CR 1.1 RE (2)

All of the components defined in this document shall be developed and supported

following the secure product development processes described in IEC 62443-4-1.

Components shall provide the capability to identify and authenticate all human users.

Components shall provide the capability to uniquely identify and authenticate all human users.

Components shall provide the capability to employ multifactor authentication for all

human users access to the component.

ၜణ SGSޜခ ਜ਼ࢽ

Ҿඇਸ༹݀ဣIEC 63443-4-1ණኤ

IEC 62443-4-2ණኤ

IEC 62443-4-2 Քጚಢჟᅜतඇୁײණኤޜခ

ՔጚಢჟĂ႑တҾඇႴ൱ᇑ߁঴૙౒Ă႑တ

ҾඇဣཥٲॺIEC 62443-3-3ණኤ

IEC 62443-3-3ණኤ

IEC 62443-2-4ಢჟ

…

߾ᄽ࿿૴ྪยԢ

ऐ࣑঍ᄽ߾

ڢࡆ঍ཚ੦዆ဣཥ

࿿૴ྪ႑တ֑ण੦዆ဣཥ

ಢჟײୁ૙࠶Ҿඇ

č

గ߾ᄽཚ႑ׂ೗त࿿૴ྪ঴ਦ

๕ࠅӄݛ

గኪఁ߾ᄽᅜ໿ྪ঍࣑ऐഓᄽ

ڦဣཥଶᇘࡽ႑ڦཚ঍ڢࡆగ

ံႜഓᄽ

గኪఁظႎ႙࿿૴ྪ੔रࠅິ

గ࿿૴ྪݛӄᆅଶኁĂޜခ༵ࠃฆ

č

SGSࠀׯӄ૩

16

SGS IEC 62443ݛӄ

1

2

3

4

5

6

7

ጧკࢅՔጚಢჟ

• ඓۨਜ਼ࢽႴ൱

ࣄऺࠚӄĂೠݛۨ዆ခĂޜถණኤ• ঻

• ၜణഔۯLjSGSܔഓᄽ၎࠲ၜణටᇵ৊ႜ

Քጚಢჟ঄঴

ࠚ࿔ॲೠ

ࢽਜ਼ܔᄲ൱૙࠶Քጚᄲ൱LjဣཥҾඇ਍ߵ •

࿔ॲ৊ႜೠࠚ

߀ኝࢽਜ਼

• ਜ਼ߵࢽֶ਍ਐݴဆԒܔߢၜణ࿔ॲĂरຍ

ጨଙڪ৊ႜႪኟ

ࢽዺਜ਼ޤཚॺᅱLjࠏरຍࠃ༵ࢽਜ਼ྺSGS•

ፕ߾߀ኝׯྜ

ްֱᇑ֪๬

• SGSरอሞਜ਼ࢽํᄓ๪त׍߾၄ׇ৊ႜ

FATLj኱዁ํ၄၄ׇ࿔ॲࢅဣཥڦፌዕ

ॠֱᇑ֪๬

ֶਐݴဆ

ණኤᄲ؜ቴࢽLjӻዺਜ਼ࡕ঳ࠚೠอೠ਍ߵ •

൱ֶਐ

ߢဆԒݴਐֶ؜๼ •

ࠚೠް

• ܔኝڦࢫ߀࿔ॲĂҾඇ੦዆ٯแ৊ႜް

ࠚೠ

• ඓԍ߳ၜᄲ൱஢ፁՔጚࢅණኤऺࣄᄲ൱Lj

኱዁໯ᆶ࿚༶࠲Կ

Ԓߢतኤກ

LjSGSڪ୤ऻጨଙLjၜణڗ࿔ڦ঍༵਍ߵ •

ኤກࢅߢԒࠚਏೠ؜

17

SGSڦೠࠚጆॆদཚࡗISA IEC 62443

ဣଚՔጚڦጆॆණኤऺࣄಢჟLj׼

ᆶCISP/CISSP/OSCPࡔڪྔాණ੗

ڦྪஏҾඇጆᄽኤກLjጆᄽీ૰ᆛ

ᆶԍቱă

ྷݔጨዊڦԢྜ

SGS๟සူՔጚڦCBTLǖ

• IEC 62443-2-4

• IEC 62443-3-3

• IEC 62443-4-1

• IEC 62443-4-2

ඇ૰ၹዺჇد

ăدჇ೗ׂڦ೺ࢫၹዺණኤࣷSGSॽ

ೕLj๫دჇཞਉӸӰኤᅏ๕Ljಆฝࠌ

ጉႀჇد෉࿔Ljժ૴ࢇ༹௃ཞօჇ

඄ࢅ૰ᆖၚڦ೗ׂۇٴᅃօક৊Ljد

ྰႠă

ኤກᇑԒߢቛ๖

IEC 62443ೠࠚԒߢᅜतIEC 62443 CBኤກǖ

ܓྲཱྀरຍڦጆᄽ

18

IEC 62443֪๬ණኤޜခ

IEC 62443 series test and certification

service

SGSۉጱۉഘڼෙݛॠ֪ํᄓ๪ፕྺଶံڦIEC 62443ණኤޜခ༵ࠃฆLjժ൐ፕྺዐۇٴࡔ୥ڼᅃॆൽڥIEC 62443 3-3

ጨዊڼڦෙݛॠ֪ํᄓ๪Lj࿢்ڦጆᄽཷܓॽၹዺഓᄽํ၄ණኤణՔă༵ࠃඇݛ࿋ޜڦခLjԈઔՔጚಢჟޜခLjֶ

ਐݴဆᅜतೠޜࠚခăӻዺഓᄽࢇޙڟٳIEC 62443၎߾ڦ࠲ᄽྪஏҾඇՔጚLjൽڥIEC 62443 CBණኤăSGSڦ၎

փܔ႐ᆌݣࠕీࢽҾඇႠLj๑ਜ਼ڦ႑တरຍࢅဣཥ዆ᄽ੦߾ҾඇԍቱLjඓԍڦ੍੗ࠃ༵ࢽਜ਼ྺခॽޜጆᄽࢅጨዊ࠲

܏ሺڦ׊ྪஏॆඇ཈቟ă

ྺ๊஺჋ስSGS IEC 62443ဣଚޜခ?

12/24/Cybersecurity services_V2 © SGS Société Générale de Surveillance SA. (2024)

www.sgs.com

www.sgsonline.com.cn

૴ဣ࿢் CONTACT US

ฉ࡛ Shanghai

T : +86 (0)21 6191 5670

ee.shanghai@sgs.com

࠽ዝ Guangzhou

T : +86 (0)20 8215 5411

ee.guangzhou@sgs.com

ศᒰ Shenzhen

T : +86 (0)755 2654 4661

ee.shenzhen@sgs.com

ዘ൪ Chongqing

T : +86 (0)23 8553 8555

ee.chongqing@sgs.com