scope:

Document Scope

This document addresses raising a customer's level of cybersecurity by following seven fundamental principles:

a. Segmenting networks,

b. Understanding data types and flows,

c. Monitoring devices and systems,

d. User management,

e. Hardening devices,

f. Updating devices, and

g. Providing a recovery plan/escalation process.

This document is not meant to be all-inclusive. It is a representative set of best practices that electrical equipment and medical imaging manufacturers may provide to their customers as they utilize manufactured equipment within the context of their respective market. This document is also not intended to describe security best practices (such as access control and data encryption) for the manufactured devices themselves. Plant and physical security are also not in addressed in this document.