scope:

The standard defines the functions and features to be provided in IEDs to accommodate cybersecurity programs. The standard addresses security regarding the access, operation, configuration, firmware revision, and data retrieval from an IED. Confidentiality, integrity, and availability of external interfaces of the IED are also addressed.

Purpose

The standard defines the functions and features to be provided in IEDs to support cybersecurity programs. Specifically, the standard states what safeguards, audit mechanisms, and alarm indications shall be provided by the vendor of the IED regarding the capabilities associated with access, operation, configuration, firmware revision, and data retrieval from an IED. The standard also allows the user to define a security program around these features tailored to the specific requirements of that security program; if an IED does not meet this standard, whether the requirements are tailored or not, this can identify the need for other defensive measures (technical and/or procedural) to be taken. This standard also defines explicit measures to help ensure authenticity, integrity, and confidentiality of data at rest and in transit.