UNLIMITED FREE
ACCESS TO THE WORLD'S BEST IDEAS

SUBMIT
Already a GlobalSpec user? Log in.

This is embarrasing...

An error occurred while processing the form. Please try again in a few minutes.

Customize Your GlobalSpec Experience

Select Your Free Newsletters

Industry Newsletters

Select Your Free Product Alerts

Finish!
Privacy Policy

This is embarrasing...

An error occurred while processing the form. Please try again in a few minutes.

NEMA - CPSP 1

Supply Chain Best Practices

active, Most Current
Organization: NEMA
Publication Date: 1 January 2021
Status: active
Page Count: 28
scope:

Document Scope

This guideline document addresses supply chain integrity through four phases of the product development life cycle: manufacturing and assembly, tamper-proofing, security development life cycle, and decommissioning/revocation. This document is not meant to be all-inclusive but rather a representation of identified best practices that vendors can implement as they develop, manufacture, and deliver products as part of the supply chain.

Document History

CPSP 1
January 1, 2021
Supply Chain Best Practices
Document Scope This guideline document addresses supply chain integrity through four phases of the product development life cycle: manufacturing and assembly, tamper-proofing, security development...

References

This document references:
DODD 5220.22-M CE-02 - NATIONAL INDUSTRIAL SECURITY PROGRAM OPERATING MANUAL
Published by DODD on May 18, 2016
a. The NISP applies to all Executive Branch Departments and Agencies and to all cleared contractor facilities located within the United States and its territories. b. This Manual applies to and shall...
This document references:
IEC 62351-3 - Power systems management and associated information exchange – Data and communications security – Part 3: Communication network and system security – Profiles including TCP/IP
Published by IEC on February 1, 2020
Scope This part of IEC 62351 specifies how to provide confidentiality, integrity protection, and message level authentication for SCADA and telecontrol protocols that make use of TCP/IP as a message...
This document references:
IEC 62351-6 - Power systems management and associated information exchange – Data and communication security – Part 6: Security for IEC 61850
Published by IEC on October 1, 2020
This part of IEC 62351 specifies messages, procedures, and algorithms for securing the operation of all protocols based on or derived from the IEC 61850 series. This document applies to at least...
This document references:
IEC 62351-7 - Power systems management and associated information exchange - Data and communications security - Part 7: Network and System Management (NSM) data object models
Published by IEC on July 1, 2017
This part of IEC 62351 defines network and system management (NSM) data object models that are specific to power system operations. These NSM data objects will be used to monitor the health of...
This document references:
IEC 62443-4-1 - Security for industrial automation and control systems – Part 4-1: Secure product development lifecycle requirements
Published by IEC on January 1, 2018
This part of IEC 62443 specifies process requirements for the secure development of products used in industrial automation and control systems. It defines a secure development life-cycle (SDL) for...
This document is referenced by:
CSA/ANSI T200:22 - Evaluation of software development and cybersecurity programs
Published by CSA/AM on January 1, 2022
This Standard describes a methodology for assessing the product software and cybersecurity control maturity of an organization. This Standard provides the evaluators and vendors a method to determine...
This document is referenced by:
NEMA CPSP 2 - Cyber Hygiene Best Practices
Published by NEMA on January 1, 2018
Purpose Cyber Hygiene Best Practices identifies a set of industry best practices and guidelines that electrical equipment and medical imaging manufacturers can implement to raise their level of...
This document is referenced by:
CY 70001 - Cybersecurity Implementation Guidance for Connected Electrical Infrastructure
Published by NEMA on January 1, 2023
This guideline document addresses cybersecurity protection of electrical infrastructure when network connected within the context of a commercial, industrial, or residential building. It does not...
View Less
View All
Advertisement